fix(login): remove unconditional logging of OAuth2 access and refresh tokens

OAuth2 access token and refresh token were unconditionally printed to
stderr via log.Printf on every SSO login, regardless of --verbose flag.
Any CI/CD pipeline or log aggregation system capturing stderr would
silently record long-lived credentials in plaintext.

All other sensitive data in the codebase (request bodies, headers) is
already gated behind config.Verbose / config.DumpRequestIfRequired.
The 'Authentication successful' message printed immediately before is
sufficient confirmation; the token values add no diagnostic value.

Signed-off-by: Harish R S <harishrs21082006@gmail.com>

Author: Harishrs2006

cmd/login.go

@@ -293,8 +293,6 @@ func oauth2login(
 	ctx, cancel := context.WithTimeout(ctx, 1*time.Second)
 	defer cancel()
 	_ = srv.Shutdown(ctx)
-	log.Printf("Token: %s\n", tokenString)
-	log.Printf("Refresh Token: %s\n", refreshToken)
 	return tokenString, refreshToken
 }