Exchange Oauth Token Endpoint

Exchange a Stytch OAuth token for a session token and JWT.

Called by the browser app after Stytch redirects back with ?token=xxx. Intentionally unauthenticated — this endpoint IS the authentication mechanism. The Stytch secret key never leaves the server.