This PR is a follow-up to #5591. It allows users to choose which auth storage mode they want by using the new `cli_auth_credentials_store_mode` config.
By analogy to `codex exec`, this kicks off a task in codex cloud noninteractively.
Allows to set API key per invocation of `codex exec`
Adds a TUI for managing, applying, and creating cloud tasks