SSO / OIDC plan

Long-term: community login uses the same identity as app.doodbrain.com.

• OIDC against LibreChat / DoodBrain IdP
• Align with Phase 3 Google OAuth redirect URIs
• Do not duplicate password databases
• Discourse uninstalled until RAM budget exists

Architecture only — production app auth unchanged.