docs: fix claude authentication command (#739)

* docs: fix claude authentication command in claude-code.md

Replace `claude setup-token` with `claude auth login` for container auth.

`claude setup-token` generates a long-lived token for CI/scripts without
saving it locally. For container deployments with PVC persistence,
`claude auth login` is the correct command — it authenticates via OAuth
device flow and stores credentials on disk.

Ref: https://docs.anthropic.com/en/docs/claude-code/cli-usage

* fix: update remaining setup-token refs and wording nit

Address review comments:
- Replace claude setup-token with claude auth login in NOTES.txt
- Replace claude setup-token with claude auth login in wizard.rs
- Improve wording: 'restart the pod so the bot process loads the new credentials'

---------

Co-authored-by: pahud <[email protected]>
Co-authored-by: 超渡法師 <[email protected]>

Author: 3 people

charts/openab/templates/NOTES.txt

@@ -32,7 +32,7 @@ Agents deployed:
     kubectl exec -it deployment/{{ include "openab.agentFullname" (dict "ctx" $ "agent" $name) }} -- codex login --device-auth
 {{- else if eq (toString $cfg.command) "claude-agent-acp" }}
     Authenticate:
-    kubectl exec -it deployment/{{ include "openab.agentFullname" (dict "ctx" $ "agent" $name) }} -- claude setup-token
+    kubectl exec -it deployment/{{ include "openab.agentFullname" (dict "ctx" $ "agent" $name) }} -- claude auth login
 {{- else if eq (toString $cfg.command) "gemini" }}
     Authenticate:
     kubectl exec -it deployment/{{ include "openab.agentFullname" (dict "ctx" $ "agent" $name) }} -- gemini

docs/claude-code.md

@@ -35,6 +35,16 @@ working_dir = "/home/node"
 
 ## Authentication
 
+Sign in interactively using the OAuth device flow. Credentials are stored on disk (persisted via PVC across pod restarts):
+
+```bash
+kubectl exec -it deployment/openab-claude -- claude auth login
+```
+
+After authenticating, restart the pod so the bot process loads the new credentials:
+
 ```bash
-kubectl exec -it deployment/openab-claude -- claude setup-token
+kubectl rollout restart deployment/openab-claude
 ```
+
+> **Note:** `claude setup-token` is a different command — it generates a long-lived token for CI/scripts and prints it without saving locally. For container-based deployments, `claude auth login` is the correct approach as it persists credentials to the filesystem.

src/setup/wizard.rs

@@ -525,7 +525,7 @@ fn print_next_steps(agent: &str, output_path: &Path, is_local: bool) {
                 cprintln!(C.cyan, "  1. Install Claude Code + ACP adapter:");
                 println!("       npm install -g @anthropic-ai/claude-code @agentclientprotocol/claude-agent-acp");
                 cprintln!(C.cyan, "  2. Authenticate:");
-                println!("       claude setup-token");
+                println!("       claude auth login");
             }
             "codex" => {
                 cprintln!(C.cyan, "  1. Install Codex CLI + ACP adapter:");
@@ -560,7 +560,7 @@ fn print_next_steps(agent: &str, output_path: &Path, is_local: bool) {
                 "       kubectl exec -it deployment/openab-kiro -- kiro-cli login --use-device-flow"
             ),
             "claude" => println!(
-                "       kubectl exec -it deployment/openab-claude -- claude setup-token"
+                "       kubectl exec -it deployment/openab-claude -- claude auth login"
             ),
             "codex" => println!(
                 "       kubectl exec -it deployment/openab-codex -- codex login --device-auth"