If you’re on stable, then none of this topic will apply until after the next stable release in early August. So you should add oauth2-basic back to your app.yml. The original failure must have been for some other reason.
Unfortunately the ‘hint’ logic is not very smart, and isn’t aware of stable vs. tests-passed.