Use OAuth2 so users do not have to create their own owner-only OAuth consumers

OAuth2 has support for installed apps as it allows you to obtain tokens _without_ a consumer secret, which is very useful for both installed apps/programs as well as SPAs. Wikibase-cli could maybe use OAuth2 so all someone has to do is click the link and authorize it.