feat: add cdcx auth login browser-based OAuth

[troycdc]

Summary

• Adds cdcx auth login command that opens browser for OAuth authentication against the Crypto.com Exchange broker API
• Polls server for credentials after user completes authorization in browser, with ESC to cancel and 5-minute timeout
• Stores received API key/secret in config with profile deduplication (overwrites existing profile if same api_key, otherwise creates account-{N})
• Adds skip_serializing_if for empty envs in ProfileConfig to keep TOML clean

Changes

• crates/cdcx-cli/src/groups/auth_login.rs — new module (implementation + 33 unit tests)
• crates/cdcx-cli/Cargo.toml — add uuid, open, crossterm, reqwest deps
• crates/cdcx-cli/src/cli_builder.rs — register login subcommand under auth
• crates/cdcx-cli/src/main.rs — wire dispatch
• crates/cdcx-core/src/config.rs — skip_serializing_if = "HashMap::is_empty" on envs field

Test plan

• cargo build compiles cleanly
• cargo test -p cdcx-cli — 121 tests pass (33 new)
• cargo clippy — no warnings
• Manual test: cdcx auth login → select env → browser opens → complete OAuth → credentials stored
• ESC cancellation works
• Dedup: re-login with same account updates existing profile
• Process exits cleanly after success

closes #49

🤖 Generated with Claude Code

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​open@​5.3.5

View full report