9 new commits pushed to

<https://github.com/jmpsec/osctrl/tree/main|main>

by javuto

<https://github.com/jmpsec/osctrl/commit/6efe82d9b605d7babd700317acc61254092248ca|6efe82d9>

- cmd/api: global OIDC federated login

<https://github.com/jmpsec/osctrl/commit/fe1f4e281be237fa4a911f8ac520714416bd8eab|fe1f4e28>

- frontend: "Continue with SSO" button on the login page

<https://github.com/jmpsec/osctrl/commit/29513a840080b8b0084f1f77528402fb39533599|29513a84>

- users: mark federated rows with auth_source and show OIDC badge

<https://github.com/jmpsec/osctrl/commit/403d088fdc9e80476938eec9e64b29ef16b35c8b|403d088f>

- auth: server-side logout + IdP end-session navigation

<https://github.com/jmpsec/osctrl/commit/8afac2baddf7b0b2a1ca2942e772bbf2b5d4f374|8afac2ba>

- auth: pass client_id to IdP end-session URL

<https://github.com/jmpsec/osctrl/commit/6c9b1a35339b3c4f3bdb0ba42aa6d70288687828|6c9b1a35>

- auth: persist id_token at callback + pass as id_token_hint on logout

<https://github.com/jmpsec/osctrl/commit/6cfc830a8268fd4648472e952f235448e853948e|6cfc830a>

- api: /logout hides IdP metadata from anonymous callers

<https://github.com/jmpsec/osctrl/commit/fa30048c8c4d8ca5fd504fe6e5bbcba4b9f0fdc7|fa30048c>

- auth: split OAuth2 state and OIDC nonce into independent values

<https://github.com/jmpsec/osctrl/commit/5e829f79f0ba48ba6b0e99514b49e7c4843135a9|5e829f79>

- Merge pull request #830 from alvarofraguas/pr/oidc-api-spa jmpsec/osctrl