OAuth apps

OAuth app management is scaffolded. Full authorization and token grants are marked TODO.

Scopes: read:watchlist, read:searches, write:notifications.