#19 Fix: [for cherry-picking] Login now creates a valid default project, ra

Fixed Findings

• Create a usable project during login
• Restrict authenticated API requests to the configured host
• Add ESLint as a development dependency
• Correct SDK package references in templates
• Add the missing shared types module
• Resolve bundled templates from the package root
• Reconnect when SSE streams close cleanly

Automated fix from agentic review of https://github.com/wave-av/cli/pull/18

---

[!NOTE]

Fix login to create a valid default project entry and update related auth/API handling

• The auth login command now initializes a projects config entry (including baseUrl, organizationId, organizationName) and sets currentProject when authenticating via --api-key or device flow.
• The api command now validates that requests use HTTPS and match the configured base URL's origin, throwing an error on mismatch instead of silently proceeding.
• All project templates update their SDK import from @wave/sdk to @wave-av/sdk at ^2.0.0.
• Template directory resolution in init now correctly differentiates between dist (built) and source layouts.
• connectSSE now throws an error when the SSE stream closes rather than silently exiting the read loop.

^{Macroscope summarized bff3199.}