Save the Pi credential

Store the ~/.pi/agent/auth.json contents to inject into every sandbox, replacing any credential already configured. Supply either a pasted blob (authJson) or one of the org's Claude/Codex API keys to convert into one (source); a converted credential is a snapshot, not a link, so rotating the key means converting again.