Save oauth tokens to system keychain

Right now we save oauth tokens into the settings file directly which is not safe. We may want to leverage https://www.npmjs.com/package/keytar to store them into system keychain.

This one is a follow up of https://github.com/Microsoft/vscode-pull-request-github/pull/94