All answers

Do I need a Spotify developer app or OAuth?

Not for Social Fetch public catalog routes. You only need a Social Fetch API key. Spotify Web API with a developer app and OAuth remains the path for playback, user libraries, and playlist write scopes.