signIn abstract method
Launch hosted sign-in with PKCE S256 + state + nonce. In mobile
mode (default when CtrlAppAuthConfig.callbackUrl is not the BFF
origin) generates a code_verifier and sends its S256 challenge to
/api/public/auth/login?mobile=1&.... The system browser then
hands control to the OS-registered app link which the caller
forwards to handleCallback.
Implementation
Future<void> signIn({String? provider, String? returnTo});