Framework-agnostic OIDC/OAuth client engine for Token-Sheriff. Builds on the commons transport base layer (shipped in token-sheriff-validation) to add the client-side flows — token retrieval, userinfo, revocation, introspection, end-session and PAR. Pure Java, no framework dependency.