How to add OAuth2.1 authorization code + PKCE, OIDC id/access/refresh tokens, and modern security standards to an existing user base — without replacing it — using Ory Hydra.