Add Cloud Sync device tokens

[bholmesdev]

Summary

• add hashed per-device token storage and auth checks for Cloud Sync functions
• add CLI token mint/list/revoke plus token-aware cloud connect/create/sync/watch
• require web app connection tokens and thread them through workspace/file/asset calls

Testing

• pnpm check
• pnpm --filter @hubble.md/sync build
• pnpm --filter @hubble.md/convex-client build
• pnpm typecheck
• pnpm build:desktop
• pnpm --filter @hubble.md/cli build
• node packages/cli/dist/index.js tokens --help

Closes #25

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
hubble-md-web	Ready	Preview, Comment	Jul 4, 2026 1:54pm