Tenant OIDC client

OpenIssuer sign-in, tokens, and session data.

Authenticate against the configured tenant issuer and inspect the identity returned to this NextAuth application.