v12.9.0

• locize login signs in through the browser (OAuth with PKCE on a local
  port) and keeps a personal access token, valid for 90 days, in ~/.locize
  (an expired login is named in the error); every command uses
  it when no api key is given (option, a project's .locize or
  LOCIZE_API_KEY).
  locize logout revokes it and removes it. CI keeps using api keys.
• the "missing required argument apiKey" error now mentions locize login.