Use mcdsl/terminal for all password prompts

Replace direct golang.org/x/term calls with mcdsl/terminal.ReadPassword
across mciasctl (6 sites), mciasgrpcctl (1 site), and mciasdb (1 site).
Aligns with the new CLI security standard in engineering-standards.md.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

vendor/modernc.org/libc/musl_windows_amd64.go

@@ -1121,29 +1121,6 @@ func Xwcstombs(tls *TLS, s uintptr, ws uintptr, n size_t) size_t { /* wcstombs.c
 	return Xwcsrtombs(tls, s, bp, n, uintptr(0))
 }
 
-func Xbsearch(tls *TLS, key uintptr, base uintptr, nel size_t, width size_t, cmp uintptr) uintptr { /* bsearch.c:3:6: */
-	if __ccgo_strace {
-		trc("tls=%v key=%v base=%v nel=%v width=%v cmp=%v, (%v:)", tls, key, base, nel, width, cmp, origin(2))
-	}
-	var try uintptr
-	var sign int32
-	for nel > uint64(0) {
-		try = base + uintptr(width*(nel/uint64(2)))
-		sign = (*struct {
-			f func(*TLS, uintptr, uintptr) int32
-		})(unsafe.Pointer(&struct{ uintptr }{cmp})).f(tls, key, try)
-		if sign < 0 {
-			nel = nel / uint64(2)
-		} else if sign > 0 {
-			base = try + uintptr(width)
-			nel = nel - (nel/uint64(2) + uint64(1))
-		} else {
-			return try
-		}
-	}
-	return uintptr(0)
-}
-
 // Support signed or unsigned plain-char
 
 // Implementation choices...