OAuth 2.0 Authorization Code Token Exchange

The backbone of "Sign in with Google/GitHub": swapping a temporary authorization code for long-term API access credentials.

POST /oauth/token