fix(onboard): warn that dashboard URL is printed only once

[paritoshd-nv]

Add "save it now — will not be printed again" to the tokenized dashboard URL line in both onboard print paths (OpenClaw in onboard.ts, agent UI in agent-onboard.ts). Treat the URL as a one-shot credential (GitHub-PAT style) rather than exposing it through nemoclaw status, which would widen incidental leakage via CI logs and issue-paste output.

Fixes #2167

Summary

Related Issue

Changes

Type of Change

• Code change (feature, bug fix, or refactor)
• Code change with doc updates
• Doc only (prose changes, no code sample modifications)
• Doc only (includes code sample changes)

Verification

• npx prek run --all-files passes
• npm test passes
• Tests added or updated for new or changed behavior
• No secrets, API keys, or credentials committed
• Docs updated for user-facing behavior changes
• make docs builds without warnings (doc changes only)
• Doc pages follow the style guide (doc changes only)
• New doc pages include SPDX header and frontmatter (new pages only)

AI Disclosure

• AI-assisted — tool:

---

Signed-off-by: Your Name your-email@example.com

Summary by CodeRabbit

Release Notes

• Documentation
  • Improved guidance in onboarding console messages regarding tokenized URLs. When users encounter the authentication token during the setup process, they are now explicitly instructed to save it immediately and clearly informed that the token will not be printed again in the future. This applies to both agent and gateway UI setup flows.

[coderabbitai]

📝 Walkthrough

Walkthrough

Console messages during onboarding are updated to remind users to save the tokenized URL immediately as it will not be printed again. Changes affect both agent-onboard and standard onboard modules, with corresponding test updates.

Changes

Cohort / File(s)	Summary
Agent-onboard module src/lib/agent-onboard.test.ts, src/lib/agent-onboard.ts	Updated console message for tokenized URL to append instruction that users must save it immediately, as it will not be printed again; test expectations updated accordingly.
Standard onboard module src/lib/onboard.ts	Updated printDashboard console message for OpenClaw UI tokenized URL to include save-now instruction and non-repetition warning.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 Save that token, don't delay!
Once it's gone, it's gone away,
No reprints on another day,
Tuck it safe—there's much at stake,
For your dashboard's gentle sake! 🔐

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and specifically describes the main change: adding a warning that the dashboard URL is printed only once.
Linked Issues check	✅ Passed	The PR addresses the root cause of issue #2167 by warning users to save the tokenized dashboard URL immediately since it is not recoverable later.
Out of Scope Changes check	✅ Passed	All changes are directly related to updating warning messages about the dashboard URL tokenized output, with no unrelated modifications.
Docstring Coverage	✅ Passed	Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[paritoshd-nv]

Hi @ericksoa - please review/merge it. It is a very small change.

[ericksoa]

Straightforward UX improvement. LGTM.