Improve UI layout and serve kit fonts

Serve frontend build from FastAPI

Fix OAuth callback expiry handling

Harden export import auth and MCP access

Implement initial gnexus-creds MVP scaffold