Greentic OAuth core primitives shared across services.
The crate exposes a consistent provider interface, including optional PKCE
verifier forwarding and pass-through extra_params so higher-level brokers
can enrich authorization and token requests for specific providers without
reinventing serialization concerns.