Organize local infrastructure and Vault secrets by service ownership

infra/local/mongo/mongo-client.js

@@ -0,0 +1,9 @@
+// Public browser client: this identifier is not a client secret.
+db.getSiblingDB("sxchnge").clients.updateOne(
+  {clientId: "sxchnge-local-web"},
+  {$setOnInsert: {
+    clientName: "Local browser", allowedCIDRs: ["0.0.0.0/0", "::/0"],
+    allowedScopes: ["account"], redirectURIs: ["https://localhost:5126"],
+    grantTypes: ["password", "refresh_token"], tokenEndpointAuthMethod: "none", isRevoked: false
+  }}, {upsert: true}
+);