Replace direct golang.org/x/term calls with mcdsl/terminal across init,
unseal, migrate-aad, and migrate-barrier commands. Seal password prompts
use ReadPasswordBytes to preserve zeroization capability.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>