Provider-specific OAuth callback (POST)

OAuth callback endpoint for providers that use POST (e.g., Apple with form_post response mode).

Response varies based on the original OAuth initiation:

• With code_challenge (PKCE): Redirects with insforge_code for exchange endpoint
• Without code_challenge (web): Redirects with access_token and sets httpOnly cookie