Add more scopes to oauth-client-metadata.json and refer to it in configureOAuth

public/oauth-client-metadata.json

···
   "response_types": [
     "code"
   ],
-  "scope": "atproto repo:at.mapped.*",
+  "scope": "atproto repo:at.mapped.activity:* repo:at.mapped.location:* repo:at.mapped.post:* repo:at.mapped.trail:*",
   "token_endpoint_auth_method": "none",
   "client_name": "mapped.at",
   "client_uri": "https://mapped.at"

public/script.js

···
   XrpcHandleResolver,
 } from '@atcute/identity-resolver';
 import { getRoute, navigate, onRouteChange } from './router.js';
-import { fetchAll, fetchServiceData } from './api.js';
+import metadata from './oauth-client-metadata.json' with { type: 'json' };
 
 // ── ATProto OAuth configuration ───────────────────────────────────
 configureOAuth({
-  metadata: {
-    client_id: 'https://mapped.at/oauth-client-metadata.json',
-    redirect_uri: 'https://mapped.at',
-  },
+  metadata,
   identityResolver: new LocalActorResolver({
     handleResolver: new XrpcHandleResolver({
       serviceUrl: 'https://public.api.bsky.app',