* fix(pat): treat authorization uri as opaque * fix(pat): accept result envelope in device-flow polling * docs(pat): clarify empty-uri guard intent * fix(pat): guard poll debug output and lock envelope priority --------- Co-authored-by: shangguanxuan.sgx <shangguanxuan.sgx@alibaba-inc.com>