note: cli tools do auth too — gh and claude code itself have some of the nicest auth flows i've experienced