I am configuring Microsoft Copilot for a multitenant application that uses PKCE in its OAuth 2.0 flow. What steps and configurations are required to enable secure cross-origin authorization code redemption in this environment?