atproto devs!

we are rolling out a small set of changes to OAuth: some required scopes, DPoP needs to start at PAR, and removed some openid/OIDC stuff. client packages, PDS self-hosting, and prod PDS/entryway all getting updates

may disrupt early demos, but should be more stable after this.