Adds exact-issuer OpenID Connect third-party login initiation for application-bound recovery flows. The Nuxt adapter accepts GET and form POST on the configured login path, rejects caller-selected destinations, and starts a fresh state, nonce, and S256-PKCE transaction.