It should be install app, do an oauth flow to open a tunnel, done.
This script exactly works like as you're describing:
https://community-scripts.github.io/ProxmoxVE/scripts?id=add...
It should be install app, do an oauth flow to open a tunnel, done.