refactor(identity): 统一网页认证配置来源

移除旧 OIDC_* 与 VITE_OIDC_* 业务配置读取，统一使用数据库 Revision 和 SecretStore 引用构建运行时。同步更新 Compose、示例配置、接入文档及集成测试，并保留数据库、SecretStore 和安全事件健康窗口等部署级参数。\n\n验证：go test ./...；go test -race ./...；go vet ./...；pnpm test；pnpm lint；pnpm build；docker compose config -q

apps/api/internal/httpapi/security_event_connection_handlers_test.go

@@ -8,7 +8,7 @@ import (
 	"testing"
 
 	"github.com/easyai/easyai-ai-gateway/apps/api/internal/auth"
-	"github.com/easyai/easyai-ai-gateway/apps/api/internal/config"
+	"github.com/easyai/easyai-ai-gateway/apps/api/internal/identity"
 	ssfreceiver "github.com/easyai/easyai-ai-gateway/apps/api/internal/securityevents"
 )
 
@@ -63,9 +63,9 @@ func TestSecurityEventConnectionWriteHeaders(t *testing.T) {
 }
 
 func TestSecurityEventPrerequisitesNeverExposeSecrets(t *testing.T) {
-	server := &Server{cfg: config.Config{
-		OIDCEnabled: true, OIDCIssuer: "https://auth.example/issuer/shared", OIDCTenantID: "stable-tenant",
-		OIDCIntrospectionClientID: "gateway-machine", OIDCIntrospectionClientSecret: "must-not-escape",
+	server := &Server{identityTestRevision: identity.Revision{
+		Issuer: "https://auth.example/issuer/shared", TenantID: "stable-tenant",
+		MachineClientID: "gateway-machine", MachineCredentialRef: "identity-machine-test",
 		PublicBaseURL: "https://gateway.example",
 	}}
 	payload, err := json.Marshal(server.securityEventPrerequisites())