Server-side OAuth callback — Meta redirects the browser here directly (no JWT). Exchanges + saves token, auto-connects numbers, then redirects to the FE page.

redirect_uri is rebuilt from the actual request (public host/scheme via proxy headers) so the token exchange matches the dialog's redirect_uri on any host.