5 new commits pushed to

<https://github.com/jmpsec/osctrl/tree/main|main>

by javuto

<https://github.com/jmpsec/osctrl/commit/719fd91f57945ba2f28596aa44b61d76fc64c4af|719fd91f>

- pkg/auth: provider interface + state-as-JWT cookie helpers

<https://github.com/jmpsec/osctrl/commit/fd2fc4987283e96d8d3468cc53f4755d4f235a09|fd2fc498>

- pkg/auth/oidc: provider implementation + legacy admin refactor

<https://github.com/jmpsec/osctrl/commit/3c3afe84236ece2fe14036711be20a3cec4aa521|3c3afe84>

- pkg/auth/oidc: use Nonce (not EnvUUID) as OAuth2 state param

<https://github.com/jmpsec/osctrl/commit/f46b8ec7238d41d5a4883aa18d0df5acbca0642d|f46b8ec7>

- oidc: pickUsername reads arbitrary claim names from raw token

<https://github.com/jmpsec/osctrl/commit/15125978779fd8bf1570f2b9c1bac76adcbfa64d|15125978>

- Merge pull request #829 from alvarofraguas/pr/auth-shared-package jmpsec/osctrl