Click the consent URL above and sign in with the Microsoft tenant admin account. After consent,
Microsoft redirects back to your returnUrl with ?spe_consent=success&….
Note: For localhost, use a public tunnel (e.g. ngrok) and update
spe:callback_url in server config to match.