Add Code Challenge Service documentation: outline responsibilities, members, usage, default implementation, exceptions, and references for PKCE in OAuth 2.0 flows.