auth token getting logged at debug level

i noticed the auth token is [dumped in clear text](https://github.com/oras-project/rust-oci-client/blob/v0.16.1/src/client.rs#L801) on auth successful at debug level. i don't see need to do this. if the team is onboard, i can file a fix.