CLI: support oath credentials

[josephjclark]

User story

When using oath credentials, the CLI needs to add some kind of support.

This is not a formal spec, but it means something like:

• detect an oath schema on config
• open a browser window when the job runs
• track the returned session id
• set the id back onto the config object
• Probably cache all this

Implementation notes

???