Ensure /oauth/token endpoint returns OAuth 2 conformant errors

[ThisIsMissEm]

Currently it can return Zod errors for request input validation, per #47 (comment)

Example response:

{
  "error": "Invalid request",
  "zod_error": {
    "issues": [
      {
        "expected": "'authorization_code' | 'client_credentials'",
        "received": "undefined",
        "code": "invalid_type",
        "path": [
          "grant_type"
        ],
        "message": "Required"
      }
    ],
    "name": "ZodError"
  }
}

Doesn't conform to:

interface ErrorResponse {
  error: string;
  error_description?: string;
  error_uri?: string;
}

Per https://datatracker.ietf.org/doc/html/rfc6749#section-5.2

[ThisIsMissEm]

So for OAuth endpoints we may not be able to validate via Zod?

[dahlia]

We may not be able to utilize zValidator(), but we would be able to manually call Zod in the handler.