fix(registry, oauth): registry listing fidelity, search fallback, and OAuth well-known discovery (#42, #44) - #43

The review ran to completion and reported 0 finding(s).

This check passing does not mean the code passed. It reports that tinysweeper ran, nothing more — each lane publishes its own check with its own verdict, and those are what gate the merge.