The callback page was placed under app/(auth)/callback/ — a Next.js route group — which mapped to /callback instead of /auth/callback. Move it to app/auth/callback/ so the URL matches the Google OAuth redirect URI.
