Test relying party
Minimal OIDC client for the local Login via Paxum stand (PAXUM-12536). Authorization Code + PKCE, public client, pairwise sub.
1. Sign in
Second click without prompt=login should skip the password step (Hydra skip=true → SSO within remember_for).