Fix interactive MFA repair prompt

tools/security-bootstrap-console/security_bootstrap_console.py

@@ -1408,11 +1408,9 @@ def admin_identity_command_payloads(data: dict[str, Any]) -> list[dict[str, str]
     if refresh_pi_token_state == "blocked":
         refresh_pi_token_reason = "Configure OpenBao OIDC auth before repairing the MFA check path."
     refresh_pi_token_command = (
-        "bash <<'NETKINGDOM_KEYCAPE_PI_TOKEN_REFRESH'\n"
         "set -euo pipefail\n"
         f"cd {keycape_dir}\n"
         f"KUBECTL={kubectl_bin} bash ./refresh-pi-token-live.sh platform-root\n"
-        "NETKINGDOM_KEYCAPE_PI_TOKEN_REFRESH\n"
     )
     login_command = (
         "# Terminal 1: bridge the browser callback to the bao CLI running in the OpenBao pod.\n"