auth: error instead of static fallback when no context is active (COR-393)

ResolveControlPlaneTarget loses its no-context fallback (static AuthBaseURL target + TokenForResource): a control-plane command without a login has no identity to act as, so it now errors wrapping ErrNotLoggedIn and callers render the entire login hint.