OAuth Integration

Don't reinvent auth. Let the provider handle it.

1. OAuth 2.0 Flow (Authorization Code + PKCE)

1. Your app generates:
   code_verifier = random 64-char string
   code_challenge = BASE64URL(SHA256(code_verifier))