Add support for Salesforce security requirements (PKCE, RTR, Idle RTR TTL, Refresh Token IP allowlist) - required by 2026-05-11

[leonpersaud]

As of May 11, 2026, Salesforce requires the following security controls to be supported on the Connected App, while we can enable these on the connected app, we do not own the client code to make the changes on the metadeploy code.

Requirements:

1. Enable PKCE (Proof Key for Code Exchange)

2. Enable Refresh Token Rotation (RTR)

3. Configure Idle Refresh Token TTL

Add configuration to limit idle refresh-token Time-To-Live (TTL) to 30 days.

4. Implement Refresh Token IP Range Allowlist

[yippie]

I built this but I don't see anyone maintaining the project to merge it:

#3595