- Remove groups scope (Authelia does not provide groups claim) - Set proper baseURL for OIDC redirect - Revert baseURL to empty string (must be empty or start with '/')
- Change path from cluster-infrastructure/authelia to authelia - Fix ExternalSecret sync error
- code-server: move ingress to helm-values, rbac to manifests - headlamp: move ingress to helm-values, external-secret to manifests
