Matches the OneCLI CLI's own format expectation ("oc_... format" per `onecli auth login --help`) so a malformed token gets caught at setup time rather than at first vault call. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
origin