feat: add plugin auth connect page Add /auth/connect page for plugin OAuth flow with callback origin validation, user consent step, and upgrade gate.