Runs the Microsoft delegated-Graph OAuth flow: opens the system browser, captures the redirect
on a throwaway loopback server, exchanges the code, and stores the token process-side. Resolves
once the desktop session is connected (or with connected: false on failure/timeout).
Desktop-only OneNote importer sign-in, driven from the main process via a loopback OAuth redirect.