fix(plugin): oauth phishing

[mrh997]

What type of PR is this?

Check the PR title.

• This PR title match the format: <type>(optional scope): <description>
• The description of this PR title is user-oriented and clear enough for others to understand.
• Add documentation if the current PR requires user awareness at the usage level.

(Optional) Translate the PR title into Chinese.

(Optional) More detailed description for this PR(en: English/zh: Chinese).

en:
zh(optional):

(Optional) Which issue(s) this PR fixes:

[codecov-commenter]

Codecov Report

❌ Patch coverage is 0% with 213 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
backend/domain/plugin/service/plugin_oauth.go	0.00%	82 Missing ⚠️
backend/api/handler/coze/developer_api_service.go	0.00%	48 Missing ⚠️
backend/application/plugin/auth.go	0.00%	39 Missing ⚠️
backend/internal/mock/domain/plugin/interface.go	0.00%	26 Missing ⚠️
backend/api/router/coze/middleware.go	0.00%	12 Missing ⚠️
backend/api/router/coze/api.go	0.00%	6 Missing ⚠️

Files with missing lines	Coverage Δ
...ckend/api/model/app/developer_api/developer_api.go	0.08% <ø> (-0.01%)	⬇️
backend/api/router/register.go	0.00% <ø> (ø)
backend/domain/plugin/dto/auth.go	0.00% <ø> (ø)
backend/api/router/coze/api.go	0.00% <0.00%> (ø)
backend/api/router/coze/middleware.go	0.00% <0.00%> (ø)
backend/internal/mock/domain/plugin/interface.go	9.79% <0.00%> (-0.62%)	⬇️
backend/application/plugin/auth.go	0.00% <0.00%> (ø)
backend/api/handler/coze/developer_api_service.go	0.00% <0.00%> (ø)
backend/domain/plugin/service/plugin_oauth.go	3.08% <0.00%> (-0.69%)	⬇️

... and 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.