Unhide shopify app security commands

[nickwesselman]

Replaces #8742, which GitHub closed when its stacked base branch was deleted after the App Security stack merged. This is the same change, rebased onto main. It touches the same generated files and command tests as #8765 (generic "app security check" wording), so whichever merges second needs a quick rebase.

WHY are these changes introduced?

The shopify app security commands (check, clean, instructions, record, review) were hidden while in development. They're ready to be discoverable.

WHAT is this pull request doing?

Removes hidden = true from the app security commands so they appear in help output, the CLI README, and shopify.dev docs. Regenerates the manifest, README, dev docs, and commands snapshot.

How to manually test your changes?

• pnpm shopify app --help — app security commands are listed
• pnpm shopify app security check --help

Checklist

• I've considered possible cross-platform impacts (Mac, Linux, Windows)
• I've considered possible documentation changes
• I've considered analytics changes to measure impact
• The change is user-facing — I've identified the correct bump type (patch for bug fixes · minor for new features · major for breaking changes) and added a changeset with pnpm changeset add

🤖 Generated with Claude Code

[nickwesselman]

/snapit

[github-actions]

🫰✨ Thanks @nickwesselman! Your snapshot has been published to npm.

Built from 74b3d6187c4a0a075cd59578f4a8812b0adc1c7b. Workflow run.

Test the snapshot by installing your package globally:

pnpm i -g --@shopify:registry=https://registry.npmjs.org @shopify/cli@0.0.0-snapshot-20261005222923

Caution

After installing, validate the version by running shopify version in your terminal.
If the versions don't match, you might have multiple global instances installed.
Use which shopify to find out which one you are running and uninstall it.

[nickwesselman]

/snapit

[github-actions]

🫰✨ Thanks @nickwesselman! Your snapshot has been published to npm.

Built from 8eb5385437819fedfed1d5798a56a096268e63e8. Workflow run.

Test the snapshot by installing your package globally:

pnpm i -g --@shopify:registry=https://registry.npmjs.org @shopify/cli@0.0.0-snapshot-20261005224042

Caution

After installing, validate the version by running shopify version in your terminal.
If the versions don't match, you might have multiple global instances installed.
Use which shopify to find out which one you are running and uninstall it.