Add SensitiveParameter attribute to Client::authenticate()

It is a good practice to add `#[\SensitiveParameter]` to sensitive arguments. It prevents them from leaking in stack traces.
The $token argument in Client::authenticate() is sensitive and should probably be protected:
```php
public function authenticate(#[\SensitiveParameter] string $token, string $authMethod, ?string $sudo = null): void
```