v1.0.21

Added

• Queryable output formats. Every command accepts --output (json|table|table-num|text|yaml|off) and --query, a JMESPath expression evaluated against the full response before formatting. table-num adds a row-number column; off still calls the API but suppresses response-dependent output. Powered by a vendored JMESPath engine (internal/jmespath), e.g. bp ecs DescribeInstances --output table --query 'Result.Instances[?Status==RUNNING].InstanceId'.
• OAuth device code login. bp login now authenticates through the Device Authorization Grant flow.

Changed

• bp login uses device code as the only console login flow; --remote is kept as a hidden no-op so existing scripts still parse.
• Documented the system-flag prefix contract in the README and synced the Chinese README to the device-code login flow.

Removed

• The authorization-code login path and its bundled callback page assets (asset/consolelogin/callback.html, callback_bindata.go, generate.go).