server/web: tag Config fields for snake_case JSON output (IF1 contract)
oidcstub: implement /authorize + /token auth-code+PKCE; inject window.__LETHE_CONFIG__ into SPA