fix(auth): restore xAI device login

Discover the device and token endpoints from xAI OIDC metadata and request the accepted user-principal scope set. Preserve structured OAuth failures while bounding and redacting diagnostics, and isolate persistence tests from real auth files.

Fixes #4410

Signed-off-by: Hunter B <hmbown@gmail.com>

Author: Hmbown