Creator-authorized sources

Tell Pulse what it is allowed to detect.

Twitch and YouTube should use official OAuth and embeds. TikTok, Instagram, Kick, and Facebook stay official-link/manual mode until an approved live integration exists.