[BadhriDO]

Summary

deletion_protected is the only field that tells a connection that is safe to revoke from one an agent environment depends on, and it reached no doctl output path: not -o json, not --format, not the styled card. This PR renders it in all three; godo carries the field as of v1.228.0 (#1171), which main already pins. Until now the only way to learn a connection's protection state was to attempt a revoke and read the error.
Jira: MARSOHS-2173

Scope

  $ doctl harness-runtime connections list
  ● alice
-   github · active · conn_protected
+   github · active · conn_protected · protected

  $ doctl harness-runtime connections get conn_protected
    Status    active
+   Protected yes

  $ doctl harness-runtime connections get conn_protected -o json
+   "deletion_protected": true,

  $ doctl harness-runtime connections list --format Actor,Protected
+ Actor    Protected
+ alice    true

Out of scope: the wording when a revoke is refused (MARSOHS-2184), and revoke --force, which needs a godo DeleteConnection that passes the flag harness-api already accepts.

Blast radius

🟡 Services: doctl connections output only · Customers: additive, but --no-header gains a seventh column, so a script that parses it positionally shifts; --format output is unchanged unless Protected is named.

Rollout

• Rollback: revert the commit. No state and no stored data are involved.
• Order: nothing must land first. main already pins godo v1.233.0, which carries the field, so this PR changes no dependency.

Decisions

• Protected is unconditional in Cols(), unlike PauseReason: a column that appears only when something is protected leaves "not protected" indistinguishable from "not reported". The card prints Protected no for the same reason.
• cardRowWidth is new because "Protected" is 9 characters and the shared card label column is 8; widening cardRow itself would move the value column on every agent card in doctl. (commands/agents.go)

Evidence

go test ./commands/... ./do/... ./internal/... passes except TestRegistryLogout, which fails on main too; gofmt, go vet and go build ./... are clean. Every output path above was checked against a stub harness-api, plus the cards for an unprotected and a pending connection, and --format Actor,ID,Provider,Status,Scopes is byte-identical to before. Not run from this commit: live production.

🤖 Generated with Claude Code

[SSharma-10]

LGTM