sageactive4j adapter for jakarta.servlet (Tomcat 10+, Spring Boot 3, Jakarta EE 9+): a secure SBC Auth sign-in flow (session-bound single-use state, PKCE) and callback handler.