When OAuth Breaks on a Double-Encoded Redirect: Tracing Bytes Through UTF-8, Base64, URL, and HTML

A production OAuth callback failed because a redirect URL was encoded twice. Follow the incident from pager alert to root cause through UTF-8 bytes, percent-encoding, Base64, HTML entities, JSON escapes, and data URIs.