Secure browser device authorization and paid-flow resume.
- Connect GptSkin from Codex with --login; no API key copying in the normal flow.
- Use short-lived, one-time device codes and narrowly scoped local tokens.
- Open Creem checkout when Credits are low, then resume the same confirmed theme request after Credits arrive.
- Preserve idempotency so retries do not create duplicate charges.
- Keep manual --key-stdin only as an advanced compatibility option.
- Includes macOS and Windows secure token storage and 95 passing tests.