Prefer SSO OAuth PKCE for CPA minting and sync latest accounts.

Switch CPA export to SSO→Authorization Code with referrer=grok-build, keep device-code as optional fallback, and capture new register/auth artifacts.

config.json

@@ -1,7 +1,7 @@
 {
     "duckmail_api_key": "",
-    "cloudflare_api_base": "https://temp-email-zhangyunuo.nopjcn.workers.dev",
-    "cloudflare_api_key": "394f13544eb74409ee5a97ff5f67c953",
+    "cloudflare_api_base": "https://mail.kanxue.workers.dev",
+    "cloudflare_api_key": "dhsqj.12489",
     "cloudflare_auth_mode": "x-admin-auth",
     "cloudflare_path_domains": "/api/domains",
     "cloudflare_path_accounts": "/admin/new_address",
@@ -20,11 +20,14 @@
     "cpa_remote_verify_tls": true,
     "cpa_push_proxy": "",
     "cpa_push_required": false,
+    "cpa_prefer_sso_oauth": true,
+    "cpa_require_referrer": true,
+    "cpa_allow_device_fallback": false,
     "mint_proxy": "",
     "mint_timeout_sec": 300,
     "mint_required": false,
     "email_provider": "cloudflare",
-    "defaultDomains": "zhangyunuo.net",
+    "defaultDomains": "baoxia.top",
     "cf_worker_domains": "",
     "gmail_worker_enabled": false,
     "gmail_worker_url": "https://grok-xai-mail-codes.nopjcn.workers.dev",