feat: add import restore options, OAuth confirmation, and fixes

- database import: add keep_owners (restore PostgreSQL owners and
  privileges) and sqlite_database (pick the target SQLite file) to the
  API, OpenAPI spec, and import form
- oauth: require password confirmation and support team selection on
  OAuth login
- remote process: send team broadcast events to the team of the server
  that ran the process instead of the causer's user id
- servers API: handle the legacy build server setting
- compose: support parent bind paths and volume driver options
- dns: improve record hints and provider management
- notifications: fix throttling and missing backup notifications
- ui: rework the confirmation modal
- add feature and unit tests for the new behavior

app/Http/Middleware/DecideWhatToDoWithUser.php

@@ -12,6 +12,13 @@ class DecideWhatToDoWithUser
 {
     public function handle(Request $request, Closure $next): Response
     {
+        // OAuth confirmation of destructive actions only re-authenticates the
+        // logged-in user and returns to the page it started from, so it must not
+        // be redirected to onboarding, subscription, or team selection.
+        if ($request->routeIs('auth.confirm', 'auth.callback')) {
+            return $next($request);
+        }
+
         if (auth()?->user()?->teams?->count() === 0) {
             $currentTeam = auth()->user()?->recreate_personal_team();
             refreshSession($currentTeam);