Identities for entities did.bot
agent llm did

feat(oauth): confirm a pending consent over HTTP, and a way to try it master

`POST /oauth/confirm` takes the reference read off the authorize page and the account the caller attests to, and hands back the client's redirect carrying the code. `--oauth-open` makes the three refuse-by-default policies permissive so the flow can be run against a development server. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Change-Id: Ie7732d569d5c6b9a77c8f7004d09cf5afd2f82a3