Web authentication now uses OIDC Authorization Code flow with PKCE instead of NPM forward auth. Added callback route and web utilities. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>