ci: use org variable for CURSOR_PREFERRED_MODEL

[rgarcia]

Switches agent --model ${{ secrets.CURSOR_PREFERRED_MODEL }} to ${{ vars.CURSOR_PREFERRED_MODEL }} so the model value is visible in plaintext.

The org-wide variable CURSOR_PREFERRED_MODEL has been set to claude-opus-4-8-thinking-max.

Part of an org-wide migration of this key from secret to variable. The secret will be deleted once all repos are migrated.

🤖 Generated with Claude Code

---

Note

Low Risk
Single-line workflow input change with no application or security logic impact.

Overview
The Update CLI Coverage workflow now passes the Cursor agent model via the org repository variable vars.CURSOR_PREFERRED_MODEL instead of secrets.CURSOR_PREFERRED_MODEL on the cursor-agent invocation.

This aligns with an org-wide move to store the preferred model name as a non-secret variable (e.g. claude-opus-4-8-thinking-max) so it is visible in plaintext while behavior of the automated CLI coverage job is unchanged.

^{Reviewed by Cursor Bugbot for commit ca0f5b6. Bugbot is set up for automated code reviews on this repo. Configure here.}

[firetiger-agent]

Firetiger deploy monitoring skipped

This PR didn't match the auto-monitor filter configured on your GitHub connection:

PRs in the kernel, infra, hypeman, and hypeship repos. kernel is a ~mono repo with many logical services underneath, ensure to focus on the implicated service for the PR

Reason: PR repo not specified in provided information; cannot determine if this is in kernel, infra, hypeman, or hypeship.

To monitor this PR anyway, reply with @firetiger monitor this.