app: use repository DID for default branch updates

cli: print Tangled web pull URL next to the record URI

atproto/auth: persist localhost oauth client identity