Auth

Device-grant login and browser OAuth handoff — connect social accounts from CLIs, servers, and AI agents without a dashboard session.

📄️ Start a device-grant login (RFC 8628 style)

UNAUTHENTICATED. Show the returned `user_code` and

📄️ Poll a device login and mint the API key on approval

UNAUTHENTICATED. Poll every 5 s with the `device_code`. Non-terminal