Auth0 OAuth Fixes

Auth0-specific guidance lives in Auth0 fix plus generic invalid_grant, redirect_uri_mismatch, and PKCE pages. OAuthFixer encodes the checks teams repeat during incidents.