feat(oauth): 新增 Codex account_user_id 和 organizations 字段采集、展示与判重

- 从 Codex id_token claims 和 token_response 中提取 account_user_id 和 organizations
- OAuth 判重逻辑改为优先按 account_user_id 匹配，支持同用户不同 Team 不误判
- 号池和 Provider 详情页展示组织标签、account ID 和 account_user_id
- 前端重复的 OAuth identity 工具函数提取到 utils/oauthIdentity.ts
- 后端重复的 normalize_oauth_organizations 提取到 core/provider_oauth_utils.py

tests/core/test_provider_oauth_utils_codex.py

@@ -18,8 +18,10 @@ def test_parse_codex_id_token_extracts_auth_claim_fields() -> None:
             "email": "u@example.com",
             "https://api.openai.com/auth": {
                 "chatgpt_account_id": "acc-1",
+                "chatgpt_account_user_id": "user-1__acc-1",
                 "chatgpt_plan_type": "team",
                 "chatgpt_user_id": "user-1",
+                "organizations": [{"id": "org-1", "title": "Personal", "is_default": True}],
             },
         }
     )
@@ -29,8 +31,10 @@ def test_parse_codex_id_token_extracts_auth_claim_fields() -> None:
     assert parsed == {
         "email": "u@example.com",
         "account_id": "acc-1",
+        "account_user_id": "user-1__acc-1",
         "plan_type": "team",
         "user_id": "user-1",
+        "organizations": [{"id": "org-1", "title": "Personal", "is_default": True}],
     }