feat: auto enroll into org as student and oauth improvements

packages/utils/src/constants/domains.ts

@@ -0,0 +1,9 @@
+/**
+ * The apex that hosts every free-tier tenant site as `<orgSiteName>.<TENANT_ROOT_DOMAIN>`.
+ * The `apps/cio-tenant-router` Cloudflare Worker terminates traffic for this zone and forwards
+ * to the dashboard service. Marketing apex (classroomio.com) is intentionally separate.
+ */
+export const TENANT_ROOT_DOMAIN = 'classroomio.school';
+
+/** The marketing / admin / api zone. */
+export const BRAND_ROOT_DOMAIN = 'classroomio.com';

packages/utils/src/constants/index.ts

@@ -1,4 +1,5 @@
 export * from './roles';
 export * from './org';
 export * from './content';
+export * from './domains';
 export * from './error-codes';