Keep CLI logins renewable

[morgaesis]

Agent hosts should not require an interactive login every twelve hours. This adds rotating refresh credentials with a 180-day sliding inactivity window, serializes login, logout, and refresh across processes, preserves legacy access-only credentials, and keeps explicit API-key use independent of the stored login. Transient refresh failures retain the previous credential so the client can recover through the server replay window.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​fs2@​0.4.3

View full report

[postil-dev]

1 blocking finding open
1 finding posted inline

_{Review details}