feat: OIDC/LDAP auth, audit log, maintenance windows, migrations
- Add OIDC (OpenID Connect) authentication with discovery URL support,
group-based role mapping, and token introspection
- Add LDAP authentication with bind credentials, group-based role
mapping, and configurable attribute names
- Add audit log (model, routes, templates) tracking settings changes,
plugin enable/disable, login events
- Add migrations 0009 (widget variants), 0010 (maintenance windows),
0011 (audit log)
- Add optional dependency groups to pyproject.toml: [ldap], [snmp]
- Add Settings → Auth tab with OIDC and LDAP configuration forms
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
bvandeusen
3c70ac56b3