Codes portal client (redirect) and event grant (Wave 20)

ddiff --git a/server/db/database.js b/server/db/database.js
iindex 7818ac2f..e689c46f 100644
---- a/server/db/database.js
++++ b/server/db/database.js
@@@ -594,6 +594,7 @@ function initDb(dbPath) {
              { client_id: 'deals', name: 'OpenVibe.Deals', redirect_uris: ['https://openvibe.deals/auth/callback'] },
              { client_id: 'coupons', name: 'OpenVibe.Coupons', redirect_uris: ['https://openvibe.coupons/auth/callback'] },
              { client_id: 'host', name: 'OpenVibe.Host', redirect_uris: ['https://openvibe.host/auth/callback'] },
++            { client_id: 'codes', name: 'OpenVibe.Codes', redirect_uris: ['https://openvibe.codes/auth/callback'] },
              // Billing's staff console (Wave 8): Network admins listed in BILLING_STAFF_SUBJECTS.
              { client_id: 'billing', name: 'OpenVibe.Billing', redirect_uris: ['https://billing.openvibe.network/auth/callback'] },
          ];
ddiff --git a/server/identity/principals.js b/server/identity/principals.js
iindex 687438f9..94d9ac2a 100644
---- a/server/identity/principals.js
++++ b/server/identity/principals.js
@@@ -93,6 +93,8 @@ const DEFAULT_GRANTS = [
      ['coupons', 'events.event.publish', 'openvibe.events', []],
      ['coupons', 'sources.item.read', 'openvibe.sources', []],
      ['host', 'events.event.publish', 'openvibe.events', []],
++    // Wave 20: the Codes portal relays its release events.
++    ['codes', 'events.event.publish', 'openvibe.events', []],
      // Wave 3: producers publish to OpenVibe.Events (their own source only, enforced by Events).
      ...['live', 'media', 'network', 'community', 'billing', 'chat', 'tools', 'games', 'search', 'sources', 'tips'].map(c => [c, 'events.event.publish', 'openvibe.events', []]),
      // Wave 14: Search subscribes to <owner>.index_document.* deliveries.