This path wasn't matched by the /oauth/ prefix since it starts with
/oauth- not /oauth/, causing it to fall through to SvelteKit (404).

Bumps to 0.0.1-alpha.30.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

The $hatk module alias needs a Node.js resolve hook for dynamic import()
in scanServerDir. Previously only test.ts had it — now main.ts uses the
same shared hook so production also resolves $hatk correctly.

Bumps to 0.0.1-alpha.29.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

SvelteKit SSR load functions call callXrpc via globalThis.__hatk_callXrpc,
but main.ts never set it. Now exposes callXrpc, parseSessionCookie, and
sessionCookieName before loading the SvelteKit handler.

Bumps to 0.0.1-alpha.28.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>