fix(iam): redirect_uri dinamis + validasi CSRF state di OAuthServiceImpl

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

crates/zesdex-iam/src/infrastructure/http/dto.rs

@@ -41,19 +41,23 @@ pub struct SessionListResponse {
 #[derive(Debug, Clone, Serialize, Deserialize)]
 pub struct OAuthStartRequest {
     pub config: OAuthConfig,
+    pub redirect_uri: String,
 }
 
-/// Response containing the authorization URL for an OAuth flow.
+/// Response containing the authorization URL and CSRF state for an OAuth flow.
 #[derive(Debug, Clone, Serialize, Deserialize)]
 pub struct OAuthStartResponse {
     pub auth_url: String,
+    pub state: String,
 }
 
 /// Request body for completing an OAuth flow with an authorization code.
 #[derive(Debug, Clone, Serialize, Deserialize)]
 pub struct OAuthCompleteRequest {
     pub config: OAuthConfig,
+    pub redirect_uri: String,
     pub code: String,
+    pub state: String,
 }
 
 /// Response containing the acquired OAuth token.