Connect Schwab (test page)

This calls the backend endpoints /auth/schwab/start and /auth/schwab/callback.

Note: the callback handling here is basic and does not validate state yet.