fix(smoke): read CLI credentials from ~/.mcpctl (active path)

passwd smoke read ~/.config/mcpctl/credentials and silently skipped; the CLI
stores creds at ~/.mcpctl/credentials. Now verified live against prod (4/4).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

src/mcplocal/tests/smoke/passwd.smoke.test.ts

@@ -62,10 +62,14 @@ async function healthz(): Promise<boolean> {
 }
 
 function adminToken(): string | undefined {
-  try {
-    const raw = readFileSync(join(homedir(), '.config', 'mcpctl', 'credentials'), 'utf-8');
-    return (JSON.parse(raw) as { token?: string }).token;
-  } catch { return undefined; }
+  // The CLI stores credentials at ~/.mcpctl/credentials (see config/loader.ts).
+  for (const p of [join(homedir(), '.mcpctl', 'credentials'), join(homedir(), '.config', 'mcpctl', 'credentials')]) {
+    try {
+      const tok = (JSON.parse(readFileSync(p, 'utf-8')) as { token?: string }).token;
+      if (tok) return tok;
+    } catch { /* try next */ }
+  }
+  return undefined;
 }
 
 async function login(email: string, password: string): Promise<Resp> {