auth_path

Return the resolved path to the credential store (auth.json).

Resolved at call time (not import time) so tests can redirect storage by monkeypatching deepagents_code.model_config.DEFAULT_STATE_DIR — same pattern mcp_auth._tokens_dir uses.