Add OIDC logout, fix OpenAPI schema types, expose end_session_endpoint

Backend:
- Expose end_session_endpoint from OIDC provider metadata in /auth/oidc/config
- Add getEndSessionEndpoint() to OidcTokenExchanger

Frontend:
- On OIDC logout, redirect to provider's end_session_endpoint to clear SSO session
- Strip /api/v1 prefix from OpenAPI paths to match client baseUrl convention
- Add schema-types.ts with convenience type re-exports from generated schema
- Fix all type imports to use schema-types instead of raw generated schema
- Fix optional field access (processors, children, duration) with proper typing
- Fix AgentInstance.state → status field name

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

ui/src/auth/LoginPage.tsx

@@ -22,6 +22,9 @@ export function LoginPage() {
       .then((data) => {
         if (data?.authorizationEndpoint && data?.clientId) {
           setOidc({ clientId: data.clientId, authorizationEndpoint: data.authorizationEndpoint });
+          if (data.endSessionEndpoint) {
+            localStorage.setItem('cameleer-oidc-end-session', data.endSessionEndpoint);
+          }
         }
       })
       .catch(() => {});