Add POST /api/v1/oauth/authorize behind auth middleware. Validates OAuth parameters (response_type, redirect_uri, PKCE), fetches the authenticated user, creates an authorization code, and returns it as JSON for the frontend to handle the redirect.
