Sherpo customer sign-in

Each store's authorization server lives under /s/{store hostname}; its metadata is at /.well-known/oauth-authorization-server/s/{store hostname}.