Shopify/cli 4.9.4 on GitHub

What's Changed

Require Git 2.38 or later when shopify app security check uses Git, because its protections against untrusted repositories depend on safe.bareRepository. Scans that don't use Git, such as --no-git-ignore with no Git-dependent secret candidate, still run without it by @jek in #8856
Stop shopify app security check from running a command that a scanned repository names through an empty Git remote helper by @jek in #8856
Add --print-instructions to shopify app security check to print coding-agent instructions. --yes still works but is deprecated, because it only selected printed instructions by @nickwesselman in #8878
Add usage examples to shopify app security check --help for common scan layouts, such as an external backend, a configuration in a subdirectory, exclusions, Git-ignored files, and listing the scan scope by @nickwesselman in #8875
State in the shopify app security check, record, and review help that each command reports the number of findings, but not finding details, to Shopify as usage telemetry by @nickwesselman in #8882

Fix the check that stops the CLI from running a program found in the working directory on Windows, which covered only the CLI's own current directory by @jek in #8856

Full Changelog: 4.9.3...4.9.4