feat: Add support for the iframed oauth flow.

Set 123done up to serve either the iframe flow or the standard oauth flow.

Uses the fxa-relier-client

browse to `/` to use the normal flow.
browser to `/iframe` to use the iframe flow.