Merge pull request #1 from turboazot/feat/oauth-automation-strict-addressing

fix: address oauth and strict-addressing review comments

fix: add configurable CORS handling for linear api route

docs: document strict addressing options

Make strict addressing reject unknown thread ownership

Allow explicit mention on created events in strict mode

feat: update oauth automation follow-up changes

Use compact prompt format for prompted follow-ups

feat: add Linear OAuth code exchange and token persistence

Initial commit