OAuth-shaped demo for scoped partner access. Mint tokens to access receipts, PAR, and bulk endpoints.