Authentication

[rusq]

• create CreateAndSelect
• move env logic to auth package
• use new workspace/new by default
• workspace selection logic
• workspace selection
• workspace select
• explicit loadSecrets+some tidying up