Fixes OAuth sign-in from clients such as Grok.
- Fixed: OAuth sign-in failed with "Sorry, you are not allowed to access this page" in clients that add their parameters to the authorization address with a second
?, such as Grok. The authorization endpoint is now/wp-json/site-agent/v1/oauth/authorize, which has no query string and forwards to the consent screen. - The old consent address repairs such requests, so clients that saved it earlier also connect.