CLI 인증, 올바른 방식

Traditional localhost OAuth redirects for CLI authentication fail in remote environments like SSH, containers, and WSL because they assume the CLI and browser run on the same machine. RFC 8628 Device Authorization Grant solves this by separating the token-requesting CLI from the user's authentication device, eliminating port-binding dependencies. Adopting device flow as the default pattern and storing credentials in OS keychains instead of plain JSON files represents a necessary evolution in CLI authentication design for modern distributed development workflows.