Add silent OAuth, deep-link guest redirects, and a session keepalive iframe. Co-authored-by: Cursor <cursoragent@cursor.com>