refactor: remove OIDC config from K8s manifests

OIDC configuration should be managed by the server itself (database-backed),
not injected via K8s secrets. Remove all CAMELEER_OIDC_* env vars from
deployment manifests and the cameleer-oidc secret from CI. The server
defaults to OIDC disabled via application.yml.

This also fixes the Kustomize strategic merge conflict where the feature
overlay tried to set value on an env var that had valueFrom in the base.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

deploy/base/server.yaml

@@ -63,30 +63,7 @@ spec:
                   name: cameleer-auth
                   key: CAMELEER_JWT_SECRET
                   optional: true
-            - name: CAMELEER_OIDC_ENABLED
-              valueFrom:
-                secretKeyRef:
-                  name: cameleer-oidc
-                  key: CAMELEER_OIDC_ENABLED
-                  optional: true
-            - name: CAMELEER_OIDC_ISSUER
-              valueFrom:
-                secretKeyRef:
-                  name: cameleer-oidc
-                  key: CAMELEER_OIDC_ISSUER
-                  optional: true
-            - name: CAMELEER_OIDC_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  name: cameleer-oidc
-                  key: CAMELEER_OIDC_CLIENT_ID
-                  optional: true
-            - name: CAMELEER_OIDC_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: cameleer-oidc
-                  key: CAMELEER_OIDC_CLIENT_SECRET
-                  optional: true
+
           resources:
             requests:
               memory: "256Mi"

deploy/overlays/feature/kustomization.yaml

@@ -11,7 +11,7 @@ images:
   - name: gitea.siegeln.net/cameleer/cameleer3-server-ui
     newTag: BRANCH_SHA
 patches:
-  # Server Deployment: branch-specific schema, index prefix, UI origin, OIDC disabled
+  # Server Deployment: branch-specific schema, index prefix, UI origin
   - patch: |
       apiVersion: apps/v1
       kind: Deployment
@@ -29,8 +29,6 @@ patches:
                     value: "cam-BRANCH_SLUG-executions-"
                   - name: CAMELEER_UI_ORIGIN
                     value: "http://BRANCH_SLUG.cameleer.siegeln.net"
-                  - name: CAMELEER_OIDC_ENABLED
-                    value: "false"
   # UI ConfigMap: branch-specific API URL
   - target:
       kind: ConfigMap