Automated Playwright Authentication with Microsoft SSO Push Notifications in CI/CD

Security said no to TOTP, no to service accounts, no to disabling MFA. So I built a solution that uses OAuth2 refresh tokens to maintain Playwright browser sessions in CI/CD—without ever triggering push notification MFA after the initial setup. Here's the COSMIC Auth Pattern.