Single sign-on (Authentik)

How SSO ties the lab together. See Authentik for the stack itself.

App	SSO?	Method	Notes
Immich	✅ optional	OIDC
Dawarich	✅ optional	OIDC	custom email-verified scope mapping
Homarr	🔵 planned	OIDC
Open WebUI	❌ skipped		rarely used, spun down