Because:
* The only functional coverage for third-party auth checks that the
button redirects to the provider. The callback, code exchange, and
account linking run only against the real providers, so they are
untested.
This commit:
* Adds a mock OpenID Connect provider under the auth-server test dir,
started by pm2 alongside the inbox helper. It answers Google's
redirect flow and Apple's form_post flow.
* Adds issuer and jwksUri to googleAuthConfig and appleAuthConfig; when
jwksUri is set the auth-server verifies id_tokens against it and, for
Apple, skips the client-secret JWT. Startup fails if either jwksUri is
set outside NODE_ENV=dev.
* Points the local stack at the mock through dev.json and the
content-server pm2 env.
* Adds Playwright specs for linking an existing account through Google
and Apple and for signing in again through the link; all skip outside
the local target.
Closes #FXA-14551
Vijay Budhram
5f4e9173d7