fix(security): harden OAuth flow defaults — PKCE, single-use refresh, drop implicit, validate state#120

camreeves wants to merge 3 commits into

masterPlaceOS/auth:masterfrom

security/oauth-hardeningPlaceOS/auth:security/oauth-hardeningCopy head branch name to clipboard