Create a new OAuth2 client for third-party applications to use the OAuth2 Authorization Code flow.

Example:

{
  "client_id": "my-application",
  "client_name": "My Application",
  "redirect_uris": ["https://myapp.com/callback", "http://localhost:3000/callback"],
  "scopes": ["sample_read", "sample_write", "experiment_read", "experiment_write"],
  "expires": "2025-12-31T23:59:59Z"
}

The client_id is a caller-supplied, immutable public identifier (3-64 characters; letters, digits, '-' or '_') and must be unique. The client_secret is auto-generated securely, returned in the response, and should be stored securely by the client application.