fix(oauth): allow generic RFC 7591 DCR + expand install snippets

- /oauth/register: drop resource_required check, accept generic
  registrations (Claude Desktop omits resource in DCR body per spec).
  serverId stored as NULL; /authorize still enforces org-ownership
  + access-token aud claim still pinned to resource. Fixes Claude
  Desktop DCR failure (ofid_d7e39530c109fa7f).
- /oauth/authorize: skip strict server.id check when client.serverId
  is NULL (generic client); org check remains the security boundary.
- schema: oauth_clients.server_id no longer NOT NULL.
- migration 0002: ALTER COLUMN server_id DROP NOT NULL (already
  applied on prod).
- install-snippets: add Claude Code (CLI), VS Code, Codex, raw URL
  tabs. Claude Desktop now shows form-field values (Name / Remote MCP
  Server URL / OAuth Client ID / Secret) matching the new Custom
  Connector UI instead of the obsolete JSON config.
- types: InstallTarget enum extended.
- hero-video: clicking the audio toggle restarts the video from
  frame 0 so unmute aligns with the spoken opening.
- marketing: drop em-dashes from rendered copy.

apps/web/components/hero-video.tsx

@@ -85,7 +85,12 @@ export function HeroVideo() {
     const next = !v.muted;
     v.muted = next;
     setMuted(next);
-    if (!next && v.paused) {
+    // Restart from frame 0 whenever the audio state toggles. Visitors who
+    // unmute want to hear the opening, not whatever moment the video was
+    // already at; visitors who re-mute also expect a clean restart so the
+    // animation lines up with the silent loop again.
+    v.currentTime = 0;
+    if (v.paused) {
       v.play().catch(() => undefined);
     }
   }, []);
@@ -155,7 +160,7 @@ export function HeroVideo() {
             color: 'var(--color-fg-muted)',
           }}
         >
-          your browser blocked playback — open the video directly
+          your browser blocked playback. open the video directly
           <ExternalLink size={12} />
         </a>
       )}