Token Caching

Tokens are stored in the operating system keyring, not in config.toml.

Platform	Store
macOS	Keychain
Windows	Credential Manager
Linux	Secret Service-compatible keyring

Current known gap: refresh-token handling is not release-grade. If a token expires, run:

teams auth login --device-code

Use teams auth logout or teams auth logout --all to remove stored credentials.