Local login was blocked when OIDC env vars were present, causing bootstrap to fail (chicken-and-egg: bootstrap needs local auth to configure OIDC). The backend now accepts both auth paths; the frontend/UI decides which login flow to present. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>