feat(devfront): show client creators and headless filter

backend/internal/handler/dev_handler_test.go

@@ -2524,6 +2524,20 @@ func TestMapClientSummary_ClassifiesHeadlessLoginAsPrivate(t *testing.T) {
 	assert.Equal(t, "private", summary.Type)
 }
 
+func TestMapClientSummary_ExposesCreatorIDFromMetadataUserID(t *testing.T) {
+	h := &DevHandler{}
+
+	summary := h.mapClientSummary(domain.HydraClient{
+		ClientID:   "client-created-by",
+		ClientName: "Creator Visible App",
+		Metadata: map[string]any{
+			"user_id": "creator-user-id",
+		},
+	})
+
+	assert.Equal(t, "creator-user-id", summary.CreatorID)
+}
+
 func TestCreateClient_HeadlessLoginRejectsInlineJWKS(t *testing.T) {
 	var hydraCalled bool
 	h := &DevHandler{