✨ feat: Add auth flow (#146)

This adds a simple way to incorporate a centralized authentication flow.

The idea is to have the user, API and SSH (for machine authentication)
all in one place using `openauthjs` + `SST`

We also have a database now :)

> We are using InstantDB as it allows us to authenticate a use with just
the email. Plus it is super simple simple to use _of course after the
initial fumbles trying to design the db and relationships_

packages/cli/cmd/root.go

@@ -0,0 +1,50 @@
+package cmd
+
+import (
+	"runtime/debug"
+
+	"github.com/spf13/cobra"
+)
+
+var rootCmd = &cobra.Command{
+	Use:   "nestri",
+	Short: "A CLI tool to run and manage your self-hosted cloud gaming service",
+	Args:  cobra.NoArgs,
+	RunE: func(cmd *cobra.Command, args []string) error {
+		return cmd.Help()
+	},
+}
+
+// Execute adds all child commands to the root command and sets flags appropriately.
+// This is called by main.main(). It only needs to happen once to the rootCmd.
+func Execute() error {
+	err := rootCmd.Execute()
+	return err
+}
+
+var (
+	// Version stores the build version of VHS at the time of package through
+	// -ldflags.
+	//
+	// go build -ldflags "-s -w -X=main.Version=$(VERSION)"
+	Version string
+
+	// CommitSHA stores the git commit SHA at the time of package through -ldflags.
+	CommitSHA string
+)
+
+func init() {
+	rootCmd.AddCommand(runCmd)
+	if len(CommitSHA) >= 7 { //nolint:gomnd
+		vt := rootCmd.VersionTemplate()
+		rootCmd.SetVersionTemplate(vt[:len(vt)-1] + " (" + CommitSHA[0:7] + ")\n")
+	}
+	if Version == "" {
+		if info, ok := debug.ReadBuildInfo(); ok && info.Main.Sum != "" {
+			Version = info.Main.Version
+		} else {
+			Version = "unknown (built from source)"
+		}
+	}
+	rootCmd.Version = Version
+}

packages/cli/cmd/run.go

@@ -0,0 +1,26 @@
+package cmd
+
+import (
+	"nestrilabs/cli/internal/auth"
+
+	"github.com/charmbracelet/log"
+	"github.com/spf13/cobra"
+)
+
+var runCmd = &cobra.Command{
+	Use:   "run",
+	Short: "Run a new Nestri node",
+	Long:  "Create and run a new Nestri node from this machine",
+	Args:  cobra.NoArgs,
+	RunE: func(_ *cobra.Command, _ []string) error {
+		credentials, err := auth.FetchUserCredentials()
+		if err != nil {
+			return err
+		}
+
+		log.Info("Credentials", "access_token", credentials.AccessToken)
+		log.Info("Credentials", "refresh_token", credentials.RefreshToken)
+
+		return nil
+	},
+}