- adiuvAI: add backup-key.ts (device-specific AES key via safeStorage), remove _cachedPassword from AuthManager - api: add TestOAuth (6 tests) covering authorize, callback flows - docs: mark Step 5 complete with lessons learned Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>