Do I understand it right - this is Nostr Connect wrapped into OAuth2?

Nice!

I have no idea of what is happening here.

I think maybe the opposite flow would be more useful in the short term: a custodial key server that you can login to using your Google/etc account and it acts as a NIP-46 signer underneath.

Pls explain.

Hmm that sounds awesome too!