feat: accept api_token as an alias for token in sf login (#265)

The CLI session polling endpoint returns the auth JWT under the `token`
field today. Accept `api_token` as a fallback so the CLI stays
compatible if the field is renamed server-side.

Author: sigmachirality

src/lib/login.ts

@@ -97,9 +97,17 @@ async function getSession({ token }: { token: string }) {
       },
     });
 
-    return response.data as {
+    // The auth JWT is returned as `token` today; accept `api_token` as a
+    // fallback so the CLI is forward-compatible with a server-side rename.
+    const data = response.data as {
       validation?: string;
       token?: string;
+      api_token?: string;
+    };
+
+    return {
+      validation: data.validation,
+      token: data.token ?? data.api_token,
     };
   } catch (error) {
     console.error("Error getting session:", error);