pi-mcp-device-login

Signs pi in to OAuth MCP servers with a device code when the browser is on another machine (SSH, a phone, a web terminal), then keeps and refreshes the tokens.