render picture attachments outside of content

avoids duplicating pictures when retweet webmentions are rendered as comments
update oauth-dropins