feat: store auth tokens in keyring

[hex2dec]

Summary

• store saved auth tokens in the OS keyring instead of writing plaintext credentials to config.toml
• report keyring as the persisted credential source in auth command output
• keep integration tests isolated from the real system keyring by redirecting test credential storage

Validation

• cargo fmt -- --check
• cargo test

Closes #41