This change alters root-level auth gating behavior for gh extension install, but there isn't a test that exercises the root PersistentPreRunE path to ensure the command runs when unauthenticated (no hosts and no env token). Consider adding a regression test (likely under pkg/cmd/root) that executes gh extension install … with a blank config and asserts it does not fail with AuthError / auth help output.