How to Build a Read-Only Salesforce Dashboard with an External Client App

An implementation guide for a user-authenticated Salesforce dashboard using an External Client App, Authorization Code with PKCE, a backend-for-frontend, bounded SOQL queries, and no write operations.