Add CLI Device Login
Implement OAuth device login with application-owned durable provider stores.
CLI device login uses the OAuth provider device-authorization, client, consent, code, and token ports. Select oauth-provider in the schema generator to obtain the complete migration SQL and Drizzle declarations.
No complete first-party durable direct OAuth provider adapter exists yet. The application must implement all required ports, including atomic device-code approval/consumption and token issuance behavior, before exposing the flow.
Do not use memory storage for a production authorization server. Test polling, expiry, replay, approval, and concurrent consumption on the production database.