Function auth_command_reply 

pub async fn auth_command_reply(arg: &str, runtime: &Runtime) -> Value

/auth reload → {kind: output|error, text}. Token values never appear: success text is built by Runtime::reload_auth, failures carry the broker error (which is token-free by construction).