### Steps to reproduce

1. Login as an admin

2. Go to Administration > Files

3. Add a Nextcloud storage

4. Provide general Begin of the insertioninformation, select "Single-Sign-On through OpenID Connect Identity Provider"End of the insertion Begin of the deletion informationEnd of the deletion and save

5. Go to OAuth config step


### What is the buggy behaviour?

* `Manually specify audience for which to exchange access token` is not highlighted as the recommended method for token exchange


### What is the expected behaviour?

1. Add a `(Recommended)` after the 'Manually specify...' token exchange option


###

### Screenshots and other files

<img class="op-uc-image op-uc-image_inline" src="/api/v3/attachments/779323/content">

### Environment information

**OpenProject version**

Core build

[49ae95316da3b730c28911131f8e5624758c8add](https://github.com/opf/openproject/commits/49ae95316da3b730c28911131f8e5624758c8add)

Product version

[a0868f474ce642dc2f7bd982ec42d7caaa9d028a](https://github.com/opf/saas-openproject/commits/a0868f474ce642dc2f7bd982ec42d7caaa9d028a)

Core version

OpenProject 16.4.0

**Browser**

* [ ] Chrome
* [x] Firefox
* [ ] Safari
* [ ] Mobile Safari
* [ ] Other (please specify)

**Operating System**

* [x] Windows
* [ ] Mac OS X
* [ ] Mobile iOS
* [ ] Mobile Android
* [ ] Linux (please specify distro)
* [ ] Chrome OS
* [ ] Other (please specify)