Modern OIDC auth for Nuxt apps — PKCE + PAR + secure session cookies powered by Duende IdentityServer.
