fix(apps/web): enhance JWT response with token type and expiration details

[zhyd1997]

What does this PR do?

• Fixes OAuth 2.0 token endpoint missing expires_in field — causes tokens to expire silently and 403 errors in third-party apps #24840 (GitHub issue number)
• Fixes CAL-6674 (Linear issue number - should be visible at the bottom of the GitHub issue description)

Visual Demo (For contributors especially)

A visual demonstration is strongly recommended, for both the original and new change (video / image - any one).

Video Demo (if applicable):

• Show screen recordings of the issue or feature.
• Demonstrate how to reproduce the issue, the behavior before and after the change.

Image Demo (if applicable):

• Add side-by-side screenshots of the original and updated change.
• Highlight any significant change(s).

Mandatory Tasks (DO NOT REMOVE)

• I have self-reviewed the code (A decent size PR without self-review might be rejected).
• I have updated the developer docs in /docs if this PR makes changes that would require a documentation change. If N/A, write N/A here and check the checkbox.
• I confirm automated tests are in place that prove my fix is effective or that my feature works.

How should this be tested?

• Are there environment variables that should be set?
• What are the minimal test data to have?
• What is expected (happy path) to have (input and output)?
• Any other important info that could help to test that PR

Checklist

• I haven't read the contributing guide
• My code doesn't follow the style guidelines of this project
• I haven't commented my code, particularly in hard-to-understand areas
• I haven't checked if my changes generate no new warnings

TODO:
PLEASE UPDATE THE DOC HERE:
https://cal.com/help/apps-and-integrations/oauth#access-token-request

---

Summary by cubic

Make the OAuth token endpoint RFC 6749 compliant by including token_type=bearer and expires_in=1800, and by adding no-store cache headers. Fixes clients failing to parse token type and expiry (CAL-6674, #24840).

^{Written for commit 435d34f. Summary will update automatically on new commits.}

[vercel]

@zhyd1997 is attempting to deploy a commit to the cal Team on Vercel.

A member of the Team first needs to authorize it.

[cubic-dev-ai]

No issues found across 1 file

[volnei]

@zhyd1997 thank you for you contribution. Good to have the response aligned with OAuth2 patterns. Can you please check for tests failing?

[github-actions]

E2E results are ready!

• Workflow #87341.1 latest results

[zhyd1997]

Hi @volnei

Thanks for your review, the failed e2e tests doesn’t related to the code changes in the pull request.

[zhyd1997]

Failed again, interesting!

[cubic-dev-ai]

No issues found across 2 files

[zhyd1997]

CI passed finally ✅