msp-agent test SPA

OIDC authorization code + PKCE against the customer sandbox (flow 2, WI-243).