fix(auth): include configured subfolder in OAuth URL
Summary
- include the configured host subfolder in OAuth authorization URLs
- trim surrounding slashes while preserving nested subfolders
- add a regression test for a self-managed nested subfolder
Testing
go test ./internal/oauth2
Closes #8399 (closed)