Submit consent decision (called by the marketplace consent SPA)
GET /api/auth/oauth2/consent
POST { accept: boolean, consent_code: string }. Server redirects browser to client redirect_uri.
Request
Redirect to client redirect_uri with code or error.