develop
master
Login writes access/refresh tokens (and often client_secret) to tokens.json at mode 0600. Without a gitignore entry, git add . after a local login can stage live Agentic credentials. Closes: #20