feat(cli): support OIDC device authorization grant for headless login (#2795)