docs: add MCP OAuth documentation and fix lint

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/server/routes/oauth.ts

@@ -22,7 +22,8 @@ function escapeHtml(str: string): string {
 }
 
 function getBaseUrl(c: any): string {
-	if (process.env.GEARBOX_URL) return process.env.GEARBOX_URL.replace(/\/$/, "");
+	if (process.env.GEARBOX_URL)
+		return process.env.GEARBOX_URL.replace(/\/$/, "");
 	return new URL(c.req.url).origin;
 }
 
@@ -111,7 +112,10 @@ oauthRoutes.post("/register", async (c) => {
 		!Array.isArray(body.redirect_uris) ||
 		body.redirect_uris.length === 0
 	) {
-		return c.json({ error: "redirect_uris is required and must be a non-empty array" }, 400);
+		return c.json(
+			{ error: "redirect_uris is required and must be a non-empty array" },
+			400,
+		);
 	}
 
 	const clientName = body.client_name || "Unknown Client";
@@ -227,7 +231,13 @@ oauthRoutes.post("/token", async (c) => {
 		const clientId = body.client_id as string;
 		const redirectUri = body.redirect_uri as string;
 
-		const result = await exchangeCode(db, code, codeVerifier, clientId, redirectUri);
+		const result = await exchangeCode(
+			db,
+			code,
+			codeVerifier,
+			clientId,
+			redirectUri,
+		);
 		if (!result) {
 			return c.json({ error: "invalid_grant" }, 400);
 		}