wl login

Signs the CLI in to your registry. By default it runs an OAuth device authorization flow: it prints a verification URL and a code, then waits while you approve in the browser. When the configured issuer is Supabase (auth_mode = "supabase" in ~/.config/workloom/config.toml), it runs a PKCE browser flow instead.