Function: pkceChallenge()
function pkceChallenge(): Promise<PkceChallenge>
Generate a PKCE code verifier + S256 challenge (RFC 7636). Pass codeChallenge to
buildAuthorizeUrl and keep codeVerifier to later exchange the returned code via
authorizationCodeGrant. Uses the Web Crypto API (Node 18+ / browsers).
Returns
Promise<PkceChallenge>