Handle the OIDC SSO callback. Exchanges the authorization code, validates the ID token, then logs in the matching user (creating one on first login when none exists).
GET
/auth/oidc/callback
curl \
--request GET 'http://api.example.com/auth/oidc/callback' \
--header "Authorization: $API_KEY"