OAuth 2.0 Authorization Code flow with PKCE.
Orchestrates the full authentication flow: browser authorization, callback handling, and token exchange.