Add loopback device-flow authentication and durable credentials

Assistant-model: GPT-6 Sol
Assistant-workflow: local-device-auth (run cc80c691-7450-4025-bf56-613bc047c5b7)
Assistant-verification: Bun focused unit passed: mise exec -- bun test apps/server/src/auth/local.test.ts (12 pass, 0 fail)
Assistant-verification: Bun typecheck passed: mise exec -- bun run types (all workspaces and E2E)
Assistant-verification: Bun lint passed: mise exec -- bun run ci (dprint, oxlint, token checks)
Co-authored-by: Alex Lavaee <lavaman131@github.com>

ALAlex Lavaee authored last month

bfdbc53

Parente19b932

12 files changed+2002-66

StackedSplit

apps/server/src/auth/config.ts+35 −5

apps/server/src/auth/device.test.ts+66 −0

apps/server/src/auth/device.ts+141 −0

apps/server/src/auth/local-store.test.ts+135 −0

apps/server/src/auth/local-store.ts+267 −0

apps/server/src/auth/local.test.ts+578 −0

apps/server/src/auth/local.ts+564 −0

apps/server/src/auth/routes.ts+164 −53

apps/server/src/auth/session.ts+14 −1

apps/server/src/config.test.ts+28 −0

apps/server/src/config.ts+7 −4

apps/server/src/github/client.ts+3 −3