Add Authentik and oauth2-proxy support to noble cluster setup, including environment variables, playbook tags, and landing URLs. Update README and kustomization.yaml to reflect new OIDC integration, enhancing security and user authentication capabilities.

ansible/roles/noble_landing_urls/defaults/main.yml

@@ -9,6 +9,16 @@ noble_landing_urls_fetch_credentials: true
 noble_landing_urls_headlamp_token_duration: 48h
 
 noble_lab_ui_entries:
+  - name: Authentik
+    description: OIDC IdP (admin UI, OAuth2/OIDC for cluster apps)
+    namespace: authentik
+    service: authentik-server
+    url: https://auth.apps.noble.lab.pcenicni.dev
+  - name: oauth2-proxy
+    description: OIDC to Authentik + Traefik ForwardAuth (Prometheus, Alertmanager, Longhorn)
+    namespace: oauth2-proxy
+    service: oauth2-proxy
+    url: https://oauth2.apps.noble.lab.pcenicni.dev
   - name: Argo CD
     description: GitOps UI (sync, apps, repos)
     namespace: argocd