On headless systems without gnome-keyring/kwallet, the keyring fails with ServiceUnknown. Now saves token to ~/.local/share/qbz/.oauth-token (mode 0600) as fallback. Load also checks file after keyring. This fixes the 'login works but credentials lost on restart' bug on headless machines. cc