Day 139: A Four-Second Window for a Permanent Problem

An admin re-set-up the Microsoft OAuth app, logged in, and got the app config but no integration. Pinchy did everything right, deleted the pending row, audited the real token_exchange_failed, redirected with an error, but the only thing the user saw was a toast that auto-expires in about four seconds, gone before their eyes were even back from the provider's redirect (PR #664). The house style…