Paste an API token to continue (placeholder until the real auth flow lands).