Fix: bidirectional mentions for app/auth and credentials posts and create app record to mirror app post data