tesla-fleet-cn helper host
- GET /.well-known/appspecific/com.tesla.3p.public-key.pem
- GET /oauth/start  (requires Worker secrets; redirects to auth.tesla.cn)
- GET /oauth/callback
- GET /setup/status
- POST /setup/partner-register
- GET /vehicles  (read-only list after OAuth; no wake/commands)