cad8f5bb91
New confidential client 'ecosplay_code' with PKCE S256, declared in the realm import JSON for fresh installs and reconciled via sync.sh (ensure_client + set_client_uris) for existing installs. Redirect URIs match the Gitea OAuth2 callback format for the esy_lock provider: https://code.e-cosplay.fr/user/oauth2/esy_lock/callback https://cos.local/user/oauth2/esy_lock/callback Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>