fix(oauth): register Anthropic Claude.ai redirect_uri for browser MCP flow

Add https://claude.ai/api/mcp/auth_callback to the pre-registered OAuth
client redirect_uris so the new /oauth/connect-claude-ai route works.
ensureOAuthAppRegistered uses ON DUPLICATE KEY UPDATE so the DB row is
updated on the next server startup.

hermes-k8s.yaml

@@ -22,7 +22,7 @@ spec:
         fsGroup: 1000
       containers:
         - name: hermes-mcp
-          image: localhost:32000/hermes-mcp@sha256:e5dec7b23a64f2f2d7977d24ca789dbcc077bcffb86a5b623d6ec64ff2436e06
+          image: localhost:32000/hermes-mcp@sha256:ab1d74247354c49cd5be651433a95b683da8a7204ddfb0367569ee6b48a62561
           imagePullPolicy: Always
           securityContext:
             allowPrivilegeEscalation: false

src/index.ts

@@ -2361,6 +2361,7 @@ async function main() {
   if (oauthClientId && oauthClientSecret) {
     await ensureOAuthAppRegistered(oauthClientId, oauthClientSecret, [
       `${SERVER_URL}/oauth/mcp-callback`,
+      'https://claude.ai/api/mcp/auth_callback',
       'http://localhost:*',
       'claude-desktop://callback',
       'opencode://callback',