Fix OAuth callback: remove refreshToken() from init() to prevent 401 cascade that clears access_token

Add server/dist build to repository for zero-dependency prod deploy