- OAuth: URL-encode authorize params (scope spaces were unencoded),
bind loopback redirect server to 127.0.0.1 to match the redirect_uri
per Spotify's 2025 loopback rules, capture refresh_token.
- Search: URL-encode the query and drop the bogus track=1 param.
- Pagination: follow the paging object's `next` field instead of manual
offset/total bookkeeping (Spotify's recommended approach).
- Fix invalid `raise "string"` in save_image_from_url.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
