Plaintext OAuth token storage for unauthorized Claude API proxy

[consigcody94]

Found via code audit. src/auth/token-storage.ts. Stolen/scraped Claude OAuth tokens stored as plaintext JSON. Impersonates claude-cli User-Agent with cloaking.