feat: amend login params for audit

[lwin-kyaw]

Jira Link

https://consensyssoftware.atlassian.net/browse/EMBED-226

Description

• Added Citadel audit tracking for oauthInitiated and oauthFailed in the login flow.
• Fixed the redirect flow so a generated recordId is persisted into args.customState before session creation, preventing a second recordId from being generated after getRedirectResult().
• Passed recordId and authConnection through to Torus key retrieval so the same audit context is preserved through completion.
• Added a callCitadelAuditApi() helper to send audit events to the Citadel endpoint.
• Expanded unit tests to cover redirect round-trip behavior and verify recordId reuse.

How has this been tested?

Screenshots (if appropriate)

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)

Checklist

• My code follows the code style of this project. (run lint)
• My change requires a change to the documentation.
• I have updated the documentation accordingly.
• I have added tests to cover my changes.
• All new and existing tests passed.

---

Note

Medium Risk
Changes the login flow’s error propagation and extends Torus share retrieval inputs (recordId, authConnection), which could affect redirect/popup login behavior and downstream consumers relying on previous error types/messages.

Overview
Improves the login flow by catching failures during redirect/popup handling in triggerLogin and rethrowing them as a dedicated CustomAuthLoginError with a stable CustomAuthLoginErrorPrefix.

Extends Torus key retrieval by passing through additional audit context (recordId from customState and the resolved authConnection) into retrieveShares, and bumps @toruslabs/torus.js to ^17.2.3. Adds unit tests covering the new error type/prefix and the wrapped-error behavior, plus minor repo hygiene updates (.gitignore adds .npmrc).

^{Written by Cursor Bugbot for commit bfb9f26. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}