Revert autonomous credential login

[altaywtf]

Summary

The CLI must acquire tokens through its existing browser/device-link flow; it must not accept account credentials or TOTP seeds.

This removes auth login --from-env and its credential/TOTP configuration while retaining the narrowed putio-cli skill trigger.

Verification

• pnpm exec vp run verify
• 33 test files and 339 tests passed
• built auth login help exposes only --open, --output, --profile, and --timeout-seconds

Notes

The encrypted vault credentials remain unchanged for browser automation.

[Copilot]

Pull request overview

This PR reverts the previously added “autonomous credential login” capability and returns putio auth login to the browser/device-link flow only, removing any support for supplying account credentials or TOTP seeds via config/env.

Changes:

• Removes auth login --from-env and all supporting credential/TOTP configuration (env vars, config resolver, SDK calls).
• Deletes the internal TOTP implementation and its tests, and updates command-path mocks/tests accordingly.
• Updates terminal output/i18n, CLI metadata, and user/skill docs to reflect the narrowed auth flow.

Reviewed changes

Copilot reviewed 16 out of 16 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
src/test-support/command-path-mocks.ts	Removes credential/TOTP mocks now that the login path is device-link only.
src/internal/totp.ts	Deletes the TOTP implementation.
src/internal/totp.test.ts	Removes TOTP vector/validation tests alongside the implementation removal.
src/internal/terminal/auth-terminal.ts	Drops “method” output from the login-success terminal rendering.
src/internal/terminal/auth-terminal.test.ts	Updates tests to match the simplified terminal output.
src/internal/metadata.ts	Removes credential-login environment metadata from the machine-readable describe contract.
src/internal/metadata.test.ts	Updates metadata assertions to reflect removed --from-env and env metadata.
src/internal/env.ts	Removes PUTIO_CLI_LOGIN_* environment variable constants.
src/internal/config.ts	Removes credential-auth config schema/service and its resolver function.
src/internal/config.test.ts	Removes tests covering credential-auth config resolution and failure modes.
src/i18n/catalog/en.ts	Removes the cli.auth.success.method translation key.
src/commands/auth.ts	Removes --from-env flag and credential/TOTP login branch; keeps device-link flow.
src/command-paths.test.ts	Removes credential-login command-path coverage and related mocks.
skills/putio-cli/SKILL.md	Updates skill guidance to avoid credential login and emphasize profile/device flow.
skills/putio-cli/references/auth.md	Removes --from-env guidance from the auth reference doc.
README.md	Removes unattended credential-login instructions and references from user docs.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[putio-releaser]

🎉 This PR is included in version 1.7.1 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀