Coach OAuth + webhook host. Endpoints: /withings-callback /strava-callback /hevy-webhook