- Restore OIDC configuration for K3s cluster - Fix authentication settings
- Remove OIDC config from helm-values - Remove ExternalSecret (not needed) - Add Authelia middleware to ingress - Headlamp uses ServiceAccount for K8s API access