remove auth refresh subcommand and add CLAUDE.md (#30)

The auth refresh command leaked token bytes to stdout and did not force
a real refresh. Removed it entirely; export subcommands refresh
automatically. Updated statusCmd docs and error message to drop all
references to auth refresh.

Added CLAUDE.md instructing Claude to always open a PR after changes.

Closes #19.

Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Darrell <[email protected]>

Author: DTTerastar

CLAUDE.md

@@ -0,0 +1,5 @@
+# Claude Guidelines
+
+## Pull Requests
+
+Always create a pull request after implementing any fix or change. Use `gh pr create` to open the PR automatically — do not just provide a "Create PR" link and leave it to the human.

cmd/auth.go

@@ -78,28 +78,15 @@ var logoutCmd = &cobra.Command{
 	},
 }
 
-var refreshCmd = &cobra.Command{
-	Use:   "refresh",
-	Short: "Force a token refresh and report status",
-	RunE: func(cmd *cobra.Command, args []string) error {
-		token, err := auth.GetToken()
-		if err != nil {
-			return err
-		}
-		fmt.Printf("Token valid: %s...\n", token[:min(20, len(token))])
-		return nil
-	},
-}
-
 var statusCmd = &cobra.Command{
 	Use:   "status",
 	Short: "Print one-line auth readiness state and exit 0 if usable",
 	Long: `Print a one-line summary of whether the CLI has a usable token. Exit 0
 if a saved token is present and not yet expired, 1 otherwise.
 
 This is a local check — no network call and no refresh is attempted, even
-when the saved token is expired. Use 'auth refresh' (or any export
-subcommand) to actually refresh.
+when the saved token is expired. Any export subcommand will refresh
+automatically when needed.
 
 Per the quantcli shared contract:
 https://github.com/quantcli/common/blob/main/CONTRACT.md#5-auth`,
@@ -110,7 +97,7 @@ https://github.com/quantcli/common/blob/main/CONTRACT.md#5-auth`,
 		}
 		exp := store.ExpiresAt.Local().Format(time.RFC3339)
 		if time.Now().After(store.ExpiresAt) {
-			return fmt.Errorf("token expired %s — run: withings-export auth refresh", exp)
+			return fmt.Errorf("token expired %s — run: withings-export auth login", exp)
 		}
 		fmt.Fprintf(cmd.OutOrStdout(), "logged in as user %s (token expires %s)\n", store.UserID, exp)
 		return nil
@@ -120,6 +107,5 @@ https://github.com/quantcli/common/blob/main/CONTRACT.md#5-auth`,
 func init() {
 	authCmd.AddCommand(loginCmd)
 	authCmd.AddCommand(logoutCmd)
-	authCmd.AddCommand(refreshCmd)
 	authCmd.AddCommand(statusCmd)
 }