story(rest): allow users to register specific oauth2 flows and transformers

### Description

As a contributor, I want to update `rest.OAuth2()` to have a required argument `transformer Transformer`, so that users can provide custom validation logic and inject associated data with the credentials into the request context.

### Acceptance Criteria

- [ ] it works

### Related Issues

_No response_