CLI: authenticate with modulora.dev (modulora login)

[jal-co]

Let a creator authenticate the CLI against modulora.dev so publishing is scoped to their account/namespace.

Scope

• modulora login — OAuth device flow (or token paste) that mints a scoped CLI token.
• Store the token securely in the OS keychain / config file.
• modulora whoami / modulora logout.
• Server side: CLI token issuance + verification endpoint (Better Auth API key / bearer).

Acceptance criteria

• modulora login completes end-to-end and persists a token.
• Authenticated requests resolve to the correct user + namespace.
• Tokens are revocable from account settings.

Area: CLI

[jal-co]

Shipped on feat/install-verify: device-flow login (browser approval at /device), bearer-token storage per registry origin (0600, MODULORA_TOKEN override), whoami/logout with server-side revoke.