options
Flag -> config -> default resolution for dbx tunnel.
The point of this module is that it does almost NOTHING itself: every gate
setting is handed straight to @dbx-tools/tunnel’s own
plugin.resolveAuthGateConfig, which is the same function the in-process
plugin path calls. The CLI therefore cannot drift from the plugin on a default,
an env name, or a coercion rule - a flag is just a value passed where the
plugin’s config object would go, and config.* fills the rest in from the
environment, a .env file, or databricks.yml.