docs: document dynamic app (CIMD)

[xiaoyijun]

Summary

Documents dynamic app (CIMD), which allows OAuth clients to connect without pre-registration.

• Adds integrate-logto/third-party-applications/dynamic-apps, matching the docs link already referenced by Console. Covers when to use it, how to enable it and grant permissions, how to publish a client ID metadata document, the consent screen notice, and the limitations.
• Third-party app README: adds a short comparison of registered apps and dynamic apps, plus a card in "Further actions".
• AI use case: lists dynamic app as a third way to onboard AI agents, with a sequence diagram of the CIMD resolution.
• Also updates consent screen, grants management, application data structure, app-level access control, and the OSS SSRF protection section, so each mentions how dynamic clients behave there.
• Clarifies in grants management that JWT access tokens stay valid until they expire after a grant is revoked, aligning with fix(phrases): clarify revoke access copy for issued access tokens logto#9468.

Testing

tested locally

Checklist

• .changeset
• unit tests
• integration tests
• necessary TSDoc comments

[cloudflare-workers-and-pages]

Deploying logto-docs with    Cloudflare Pages

Latest commit:	bb01fea
Status:	✅  Deploy successful!
Preview URL:	https://febda428.logto-docs.pages.dev
Branch Preview URL:	https://yijun-docs-dynamic-apps-cimd.logto-docs.pages.dev

View logs

[cloudflare-workers-and-pages]

Deploying logto-docs-tutorials with    Cloudflare Pages

Latest commit:	bb01fea
Status:	✅  Deploy successful!
Preview URL:	https://5be648fa.logto-docs-tutorials.pages.dev
Branch Preview URL:	https://yijun-docs-dynamic-apps-cimd.logto-docs-tutorials.pages.dev

View logs