Add plugin hooks for oauth events (#8028, #8040)

oauth_login: triggered after successful authentication via OAuth, providing token and identity information

oauth_refresh_token: triggered after the OAuth access token was refreshed