mod_http_oauth2: Namespace the various codes to minimize confusion Both for the programmer and in OAuth flows. While unlikely, it should not be possible to cause weirdness e.g. by typing a client id and authorization code into the device code entry.

Removes invalid characters from roster entries.

```bash
sudo prosodyctl mod_clean_roster
```