feat: live account usage from api2.cursor.sh/auth/usage + per-account token caching