Document dash-separated aliases of user application-password list filters

WP-CLI now warns when a parameter passed to a command with a
`--<field>=<value>` catch-all looks like a typo of a documented one
(wp-cli/wp-cli#6392). `wp user application-password list` accepts
`--app-id`, `--last-used` and `--last-ip` as aliases of `--app_id`,
`--last_used` and `--last_ip`, but only mentioned them in prose, so the
framework reported them as typos and the Behat scenarios using them
failed on unexpected STDERR output.

Declare the aliases as parameters in the synopsis so they are recognized
as documented and no warning is emitted.

Co-authored-by: Pascal Birchler <pascal.birchler@gmail.com>
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TAVTmW8kHx829E8486uMaF

Author: claude

src/User_Application_Password_Command.php

@@ -85,7 +85,10 @@ final class User_Application_Password_Command {
 	 * : Filter by the universally unique ID of the application password.
 	 *
 	 * [--app_id=<app_id>]
-	 * : Filter by the application ID. `--app-id` is also accepted.
+	 * : Filter by the application ID.
+	 *
+	 * [--app-id=<app_id>]
+	 * : Alias of `--app_id`.
 	 *
 	 * [--name=<name>]
 	 * : Filter by the name of the application password.
@@ -98,11 +101,15 @@ final class User_Application_Password_Command {
 	 *
 	 * [--last_used=<last_used>]
 	 * : Filter by the Unix timestamp the application password was last used at.
-	 * `--last-used` is also accepted.
+	 *
+	 * [--last-used=<last_used>]
+	 * : Alias of `--last_used`.
 	 *
 	 * [--last_ip=<last_ip>]
 	 * : Filter by the IP address the application password was last used from.
-	 * `--last-ip` is also accepted.
+	 *
+	 * [--last-ip=<last_ip>]
+	 * : Alias of `--last_ip`.
 	 *
 	 * [--field=<field>]
 	 * : Prints the value of a single field for each application password.