Approve Authorize

Mint an authorization code bound to the signed-in user + their current workspace (the tenant their session belongs to).

Returns the redirect target; the frontend navigates the browser there so the MCP client receives ?code=...&state=....