refactor(identity): 统一网页认证配置来源

移除旧 OIDC_* 与 VITE_OIDC_* 业务配置读取，统一使用数据库 Revision 和 SecretStore 引用构建运行时。同步更新 Compose、示例配置、接入文档及集成测试，并保留数据库、SecretStore 和安全事件健康窗口等部署级参数。\n\n验证：go test ./...；go test -race ./...；go vet ./...；pnpm test；pnpm lint；pnpm build；docker compose config -q

apps/api/internal/httpapi/oidc_user_middleware_test.go

@@ -11,7 +11,7 @@ import (
 	"testing"
 
 	"github.com/easyai/easyai-ai-gateway/apps/api/internal/auth"
-	"github.com/easyai/easyai-ai-gateway/apps/api/internal/config"
+	"github.com/easyai/easyai-ai-gateway/apps/api/internal/identity"
 	"github.com/easyai/easyai-ai-gateway/apps/api/internal/store"
 )
 
@@ -41,10 +41,8 @@ func TestResolveGatewayUserAddsLocalOIDCContext(t *testing.T) {
 		UserGroupID:     "6dcf86f2-8eaf-4b43-8e69-181315db24f0",
 	}}}
 	server := &Server{
-		cfg: config.Config{
-			OIDCIssuer:                 "https://auth.test.example/realms/easyai",
-			OIDCGatewayTenantKey:       "default",
-			OIDCJITProvisioningEnabled: true,
+		identityTestRevision: identity.Revision{
+			Issuer: "https://auth.test.example/issuer", LocalTenantKey: "default", JITEnabled: true,
 		},
 		oidcUserResolver: resolver,
 		logger:           slog.New(slog.NewTextHandler(io.Discard, nil)),
@@ -116,9 +114,9 @@ func TestResolveGatewayUserReturnsStructuredErrors(t *testing.T) {
 	for _, test := range tests {
 		t.Run(test.name, func(t *testing.T) {
 			server := &Server{
-				cfg:              config.Config{OIDCIssuer: "https://auth.test.example", OIDCGatewayTenantKey: "default"},
-				oidcUserResolver: &fakeOIDCUserResolver{err: test.err},
-				logger:           slog.New(slog.NewTextHandler(io.Discard, nil)),
+				identityTestRevision: identity.Revision{Issuer: "https://auth.test.example", LocalTenantKey: "default"},
+				oidcUserResolver:     &fakeOIDCUserResolver{err: test.err},
+				logger:               slog.New(slog.NewTextHandler(io.Discard, nil)),
 			}
 			request := httptest.NewRequest(http.MethodGet, "/api/v1/me", nil)
 			request = request.WithContext(auth.WithUser(request.Context(), &auth.User{