Add option to use OAuth as an auth method instead of App Password.
Could be based on https://github.com/bluesky-social/cookbook/tree/main/go-oauth-cli-app, but in JS instead of Go.
Not sure if token should be stored or make it prompt to login on every use.
If it's stored, then where and would it be a safety risk, though App Password is already stored in .env file, so it being stored doesn't change much and it can be restricted much better only to things needed for it to function.
For metadata file, I could probably just host it from the Tangled repository.