refactor(open-sse): merge beta-url case + single-source refresh URLs (D)

buildUrl: fold kimi-coding into the shared ?beta=true case. refreshCline/
refreshKimiCoding now read URL (and kimi-coding clientId) from PROVIDERS instead
of hardcoded strings. Extend verify-oauth-urls with refresh/clientId snapshot;
URLs byte-for-byte equal, golden + gate clean.

Co-authored-by: Cursor <cursoragent@cursor.com>

tests/__baseline__/current.json

@@ -1 +1 @@
-{"numTotalTestSuites":222,"numPassedTestSuites":205,"numFailedTestSuites":17,"numPendingTestSuites":0,"numTotalTests":827,"numPassedTests":781,"numFailedTests":26,"numPendingTests":20,"numTodoTests":0,"snapshot":{"added":0,"failure":false,"filesAdded":0,"filesRemoved":0,"filesRemovedList":[],"filesUnmatched":0,"filesUpdated":0,"matched":153,"total":153,"unchecked":0,"uncheckedKeysByFile":[],"unmatched":0,"updated":0,"didUpdate":false},"startTime":1781356798831,"success":false,"testResults":[{"aLine truncated
+{"numTotalTestSuites":222,"numPassedTestSuites":205,"numFailedTestSuites":17,"numPendingTestSuites":0,"numTotalTests":827,"numPassedTests":781,"numFailedTests":26,"numPendingTests":20,"numTodoTests":0,"snapshot":{"added":0,"failure":false,"filesAdded":0,"filesRemoved":0,"filesRemovedList":[],"filesUnmatched":0,"filesUpdated":0,"matched":153,"total":153,"unchecked":0,"uncheckedKeysByFile":[],"unmatched":0,"updated":0,"didUpdate":false},"startTime":1781357417485,"success":false,"testResults":[{"aLine truncated

tests/__baseline__/oauth-urls-baseline.json

@@ -40,5 +40,17 @@
     "qwen": "https://chat.qwen.ai/api/v1/oauth2/device/code",
     "iflow": "https://iflow.cn/oauth",
     "kiro": "https://prod.us-east-1.auth.desktop.kiro.dev"
+  },
+  "refreshUrls": {
+    "cline": "https://api.cline.bot/api/v1/auth/refresh",
+    "kimi-coding": "https://auth.kimi.com/api/oauth/token",
+    "xai": "https://auth.x.ai/oauth2/token"
+  },
+  "clientIds": {
+    "claude": "9d1c250a-e61b-44d9-88ed-5944d1962f5e",
+    "codex": "app_EMoamEEZ73f0CkXaXp7hrann",
+    "qwen": "f0304373b74a44d2b584a3fb70ca9e56",
+    "iflow": "10009311001",
+    "kimi-coding": "17e5f671-d194-4dfb-9706-5516cb48c098"
   }
 }

tests/__baseline__/verify-oauth-urls.mjs

@@ -27,6 +27,18 @@ const resolved = {
     iflow: PROVIDERS.iflow?.authUrl,
     kiro: PROVIDERS.kiro?.authUrl,
   },
+  refreshUrls: {
+    cline: PROVIDERS.cline?.refreshUrl,
+    "kimi-coding": PROVIDERS["kimi-coding"]?.refreshUrl,
+    xai: PROVIDERS.xai?.refreshUrl,
+  },
+  clientIds: {
+    claude: PROVIDERS.claude?.clientId,
+    codex: PROVIDERS.codex?.clientId,
+    qwen: PROVIDERS.qwen?.clientId,
+    iflow: PROVIDERS.iflow?.clientId,
+    "kimi-coding": PROVIDERS["kimi-coding"]?.clientId,
+  },
 };
 const current = JSON.parse(JSON.stringify(resolved));