createApiKey refused the oauthClientId metadata with "Metadata is disabled.", so gh auth login --web failed with HTTP 400 after approval. The e2e case also expected invalid_grant for an unknown client id, where the controller answers invalid_client, so it failed before reaching the mint. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>