Add a login-time OAuth client ID selection and pass it through the authentication flow.
Users can provide an HTTPS client metadata URL with --client-id or TNG_CLIENT_ID, with the command-line option taking precedence. This stack entry keeps the legacy hosted URL as its temporary default until the following loopback change.