fix(oauth): allow generic RFC 7591 DCR + expand install snippets

- /oauth/register: drop resource_required check, accept generic
  registrations (Claude Desktop omits resource in DCR body per spec).
  serverId stored as NULL; /authorize still enforces org-ownership
  + access-token aud claim still pinned to resource. Fixes Claude
  Desktop DCR failure (ofid_d7e39530c109fa7f).
- /oauth/authorize: skip strict server.id check when client.serverId
  is NULL (generic client); org check remains the security boundary.
- schema: oauth_clients.server_id no longer NOT NULL.
- migration 0002: ALTER COLUMN server_id DROP NOT NULL (already
  applied on prod).
- install-snippets: add Claude Code (CLI), VS Code, Codex, raw URL
  tabs. Claude Desktop now shows form-field values (Name / Remote MCP
  Server URL / OAuth Client ID / Secret) matching the new Custom
  Connector UI instead of the obsolete JSON config.
- types: InstallTarget enum extended.
- hero-video: clicking the audio toggle restarts the video from
  frame 0 so unmute aligns with the spoken opening.
- marketing: drop em-dashes from rendered copy.

apps/web/components/install-snippets.tsx

@@ -8,8 +8,12 @@ import type { InstallTarget } from '@bmm/types';
 
 const TABS: { id: InstallTarget; label: string }[] = [
   { id: 'claude-desktop', label: 'Claude Desktop' },
+  { id: 'claude-code', label: 'Claude Code' },
   { id: 'cursor', label: 'Cursor' },
+  { id: 'vscode', label: 'VS Code' },
   { id: 'chatgpt', label: 'ChatGPT' },
+  { id: 'codex', label: 'Codex' },
+  { id: 'raw-url', label: 'Other' },
 ];
 
 export function InstallSnippets({ input }: { input: SnippetInput }) {
@@ -17,7 +21,7 @@ export function InstallSnippets({ input }: { input: SnippetInput }) {
   const snippet = buildSnippet(tab, input);
   return (
     <div>
-      <div className="flex gap-1 border-b border-[--color-border]">
+      <div className="flex flex-wrap gap-1 border-b border-[--color-border]">
         {TABS.map((t) => (
           <button
             key={t.id}