SAP-samples/application-vulnerability-report-scan-user-automation ? reverse-engineered prompt

Build me a Python script that helps set up the Application Vulnerability Report on SAP BTP by adding the required technical scanner user to every space in a global account.

I want it to ask for the BTP CLI URL, log in with SSO in the browser, let me pick the target global account, and then go through all subaccounts, Cloud Foundry instances, organizations, and spaces it can access. For each space, it should assign application-vulnerability-report-scanner@sap.com as SpaceAuditor. If it runs into a permission problem or a space it cannot access, it should skip it and keep going instead of stopping.

Please make it work on macOS and Windows, use the BTP CLI and CF CLI that are already installed, and print a clear summary at the end with how many subaccounts, orgs, spaces, and assignments were processed, plus any errors. If you need to check current CLI behavior or docs online, go ahead.