Release 1.16.0

Added

• Added resource support for OAuth2 authentication flows, including authorization URLs, token exchange, refresh token, and client credentials flows.

Changed

• Updated agent documentation now that anyone can submit agents for verification, and added a Publishing link.
• Updated dependency versions and overrides for security patches, including qs, uuid, js-yaml, markdown-it, serialize-javascript, and tmp.
• Removed the Gitpod getting-started tutorial and references.

Fixed

• Allowed pp-sh.io and qa-sh.io as first-party domains for CodaApiHeaderBearerToken validation.
• Fixed CodaApiHeaderBearerToken validation so all authentications are checked instead of stopping after the first non-matching authentication.