ProxyAuthState.codeChallenge

the client's PKCE S256 code_challenge, forwarded upstream

struct ProxyAuthState
string codeChallenge;