fix: correct auth issues in amplitude, livestorm, mixpanel, onesignal

- amplitude: mask api_key in dry-run body output
- livestorm: add missing Bearer prefix to Authorization header
- mixpanel: mask token/$token in dry-run ingestion body output
- onesignal: change auth from 'Key' to 'Basic' per OneSignal REST API docs

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

tools/clis/livestorm.js

@@ -10,7 +10,7 @@ if (!API_TOKEN) {
 
 async function api(method, path, body) {
   const headers = {
-    'Authorization': API_TOKEN,
+    'Authorization': `Bearer ${API_TOKEN}`,
     'Content-Type': 'application/vnd.api+json',
     'Accept': 'application/vnd.api+json',
   }