Use Workers to safely exchange OAuth tokens server-side.