Andrew
feat(auth): add shared OAuth redirect and CSRF state helpers
cf90a38