Use device flow for GitHub authentication

[filiptibell]

Using the device flow for authentication, similar to how Wally does, could greatly simplify authentication with GitHub, lowering the barrier to entry for using private tools and / or increasing rate limits. This is probably the better default option but we should keep token authentication as well.