feat(oauth): 新增 Codex account_user_id 和 organizations 字段采集、展示与判重

- 从 Codex id_token claims 和 token_response 中提取 account_user_id 和 organizations
- OAuth 判重逻辑改为优先按 account_user_id 匹配，支持同用户不同 Team 不误判
- 号池和 Provider 详情页展示组织标签、account ID 和 account_user_id
- 前端重复的 OAuth identity 工具函数提取到 utils/oauthIdentity.ts
- 后端重复的 normalize_oauth_organizations 提取到 core/provider_oauth_utils.py

frontend/src/features/providers/components/ProviderDetailDrawer.vue

@@ -289,6 +289,22 @@
                             >
                               {{ formatOAuthPlanType(key.oauth_plan_type) }}
                             </Badge>
+                            <Badge
+                              v-if="getPrimaryOAuthOrganizationTitle(key)"
+                              variant="secondary"
+                              class="text-[10px] px-1.5 py-0 shrink-0 max-w-[120px] truncate"
+                              :title="getOAuthOrganizationsTooltip(key)"
+                            >
+                              {{ getPrimaryOAuthOrganizationTitle(key) }}
+                            </Badge>
+                            <Badge
+                              v-if="key.oauth_account_id"
+                              variant="secondary"
+                              class="text-[10px] px-1.5 py-0 shrink-0"
+                              :title="key.oauth_account_id"
+                            >
+                              acct {{ formatOAuthIdentityShort(key.oauth_account_id) }}
+                            </Badge>
                             <!-- Kiro 订阅类型标签 -->
                             <Badge
                               v-if="provider.provider_type === 'kiro' && key.upstream_metadata?.kiro?.subscription_title"
@@ -303,6 +319,13 @@
                             <span class="text-[11px] font-mono text-muted-foreground">
                               {{ key.auth_type === 'oauth' ? '[Refresh Token]' : (key.auth_type === 'service_account' ? '[Service Account]' : key.api_key_masked) }}
                             </span>
+                            <span
+                              v-if="key.oauth_account_user_id"
+                              class="text-[10px] text-muted-foreground"
+                              :title="key.oauth_account_user_id"
+                            >
+                              AUID {{ formatOAuthIdentityShort(key.oauth_account_user_id, 10, 8) }}
+                            </span>
                             <Button
                               v-if="key.auth_type === 'oauth'"
                               variant="ghost"
@@ -1103,6 +1126,7 @@ import type { UpstreamMetadata, AntigravityModelQuota } from '@/api/endpoints/ty
 import { formatApiFormat } from '@/api/endpoints/types/api-format'
 import { isOAuthAccountProviderType, isKeyManagedProviderType } from '../utils/providerTypeUtils'
 import { isAccountLevelBlockReason, cleanAccountBlockReason } from '@/utils/accountBlock'
+import { formatOAuthIdentityShort, getPrimaryOAuthOrganizationTitle, getOAuthOrganizationsTooltip } from '@/utils/oauthIdentity'
 
 // 扩展端点类型,包含密钥列表
 interface ProviderEndpointWithKeys extends ProviderEndpoint {