feat: Add set-token and refresh CLI commands for auth management

[chubes4]

Summary

• Adds 2 new abilities and 3 new CLI subcommands to the core auth system, completing the CLI surface for fully headless auth management
• All extensions (socials, email, analytics, future ones) benefit automatically — zero per-plugin work needed
• Closes CLI: Add auth management commands for all platforms data-machine-socials#46

New CLI Commands

Command	Purpose
wp datamachine auth set-token <provider>	Manually inject a token + account data
wp datamachine auth refresh <provider>	Force token refresh for a single provider
wp datamachine auth refresh-all	Batch refresh all authenticated OAuth2 providers

set-token examples

# Set with individual flags
wp datamachine auth set-token linkedin --token=AQUvlL... --expires=1720000000 --user-id=abc123

# Set from full JSON (migration from another plugin)
wp datamachine auth set-token twitter --json='{"access_token":"...", "user_id":"123", "username":"chubes"}'

# Minimal
wp datamachine auth set-token reddit --token=eyJhbGciOi...

refresh examples

wp datamachine auth refresh linkedin
wp datamachine auth refresh-all

Existing Commands (unchanged)

Command	Purpose
status [provider]	Show all providers or detailed single-provider status
connect <provider>	Start OAuth flow or save direct credentials
disconnect <provider>	Clear stored account data
config <provider>	View/save API credentials (client_id, client_secret)

Architecture

Both new commands route through abilities, consistent with the abilities-first pattern:

CLI (set-token) → AuthAbilities::executeSetAuthToken()
                    → provider->save_account()
                    → provider->schedule_proactive_refresh()

CLI (refresh)   → AuthAbilities::executeRefreshAuth()
                    → provider->get_valid_access_token()

Why Core

Auth management is a core concern — BaseAuthProvider, BaseOAuth2Provider, AuthAbilities, and the OAuth2Handler all live in core. By adding these commands here, every consumer (socials, email, analytics, future extensions) gets headless auth management for free.

[github-actions]

Homeboy Results — data-machine

Lint

⚡ Scope: changed files only

✅ lint (changed files only)

Test

Failure Digest

Test Failure Digest

• Failed tests: 8
• No structured test failure details available.
• Full test log: https://github.com/Extra-Chill/data-machine/actions/runs/23257988085

Autofixability classification

• Overall: human_needed
• Autofix enabled: no
• Autofix attempted this run: no
• Human-needed failed commands:
  • test
• Failed commands with available automated fixes:
  • test
• Automated fixes are disabled for this step. Commands with available fix support in this run: test

Machine-readable artifacts

• homeboy-lint-summary.json
• homeboy-test-failures.json
• homeboy-audit-summary.json
• homeboy-autofixability.json

⚡ Scope: changed files only

❌ test (changed files only)

Audit

⚡ Scope: changed files only

✅ audit (changed files only)

Tooling versions

• Homeboy CLI: homeboy 0.81.1+dffa0b05
• Extension: wordpress from https://github.com/Extra-Chill/homeboy-extensions
• Extension revision: unknown
• Action: Extra-Chill/homeboy-action@v1

---

Homeboy Action v1