Collaroid staging OAuth: connect/revoke only. Authentication uses the dedicated TLS listeners; data sync is disabled.