Add newly generated cpa_auths xai-*.json files and related accounts/mail credential increments after the previous push.
Switch CPA export to SSO→Authorization Code with referrer=grok-build, keep device-code as optional fallback, and capture new register/auth artifacts.