Get Jam Oauth Url

Generate the Jam OAuth authorization URL and return it to the frontend. Implements manual PKCE/state with DB persistence so callback can be handled statelessly.