Browse and launch registered SMART apps on this instance. Each app gets OAuth 2.0 + PKCE, scope-based access control, and FHIR server routing.