Stripe Connect OAuth redirect handler

Public redirect endpoint Stripe posts the user back to after they authorize the Connect app. Verifies the state HMAC + expiry, exchanges the code for the connected acct_… id, creates the integration, auto-provisions the webhook endpoint, and 302-redirects the browser to the dashboard with a ?quickstart=success|error hint.