63c829bfd3
Implements admin API endpoints for managing auth provider configuration. All gated by requireSuperUser(). Endpoints: - GET /api/admin/auth-provider - returns config with clientSecret=redacted - PUT /api/admin/auth-provider - encrypts clientSecret before DB write - POST /api/admin/auth-provider/test - validates OIDC discovery endpoint - DELETE /api/admin/auth-provider - removes DB config Fixes CTO review findings: - PUT uses db.transaction() for atomic upsert (was non-atomic delete+insert) - Rebased on latest main (drops stale GRO-404/406 commits) - Added EOF newlines to authProvider.ts and authProvider.test.ts Unit tests with 9 passing test cases covering all endpoints and RBAC. Co-Authored-By: Paperclip <noreply@paperclip.ing>