- Fix Stalwart probe and API routes for OAuth by passing Bearer token
and JMAP headers from the client-side auth store
- Show only App Passwords and Email Client Setup sections for OAuth users,
hiding Password Change, Display Name, TOTP, and Encryption
- Skip principal/crypto API fetches for OAuth to avoid 403 errors
- Add Email Client Setup section with copyable JMAP username
Made-with: Cursor
