sageactive4j adapter for javax.servlet (Tomcat 8/9, Spring Boot 2, Java EE): a secure SBC Auth sign-in flow (session-bound single-use state, PKCE) and callback handler.