96e9df7: feat: add generic OIDC authentication plugin with auto-discovery, PKCE (S256), ID token verification via JWKS, token refresh, userinfo endpoint support, and configurable claim-to-profile mapping for providers like Auth0, Entra ID, and Keycloak