CLI #98 — Warn when base URL is non-localhost HTTP without HTTPS

## Task
If `baseUrl` is a non-localhost HTTP URL, print a warning to stderr about insecure transport.

## Files to update
```
packages/cli/src/lib/config.ts
```