Add mobile token flow to auto sign-in for Bonnier

Mobile app token sign-in: embedded mobile app users can authenticate via a token link with sanitized return URLs and relaxed throttle rules for token-based attempts. Also release a logout bridge that exposes a global logout entry so the app can clear session state without a full external logout redirect.