lifectl auth login

Authenticate with Lifetime Soft. Opens a browser window to complete the OAuth login flow, then stores the access token and refresh token in ~/.lifectl/config.json. If a valid token already exists it skips the browser step; if only a refresh token is present it silently refreshes first.