OAuth token endpoint

Handles authorization_code grants (with PKCE) and token exchange (RFC 8693). For token-exchange, supported subject_token_type values are urn:ietf:params:oauth:token-type:id_token and urn:ietf:params:oauth:token-type:access_token.