auth refresh: include recovery command for not_logged_in rows

[jackwener]

Context

PR #1881 added opencli auth refresh. Review noted that not_logged_in rows should be directly actionable for agents instead of requiring them to synthesize the login command.

Goal

Add a safe, structured recovery hint to auth refresh/status rows where appropriate, for example:

{
  "site": "github",
  "status": "not_logged_in",
  "recovery": "opencli github login"
}

Requirements

• No secrets or account identifiers in recovery fields.
• Keep existing table output readable.
• Apply consistently to auth refresh and consider auth status if the row shape supports it cleanly.
• Align with existing AuthRequiredError recovery-command style.

Follow-up from PR #1881 / thread #OpenCLI:7bbdfcd2.