feat(reui): update ReUI components and documentation

- Added new OIDC configuration options in `.env.example`.
- Expanded documentation in `AGENTS.md` to include OIDC endpoints and admin UI.
- Updated ReUI skill version and component count from 17 to 20 across various documentation files.
- Enhanced `README.md` and other related files to reflect the new component structure and usage guidelines.

Co-authored-by: Cursor <[email protected]>

apps/api/src/app.ts

@@ -4,6 +4,7 @@ import cors from '@fastify/cors'
 import helmet from '@fastify/helmet'
 import rateLimit from '@fastify/rate-limit'
 import sensible from '@fastify/sensible'
+import formbody from '@fastify/formbody'
 import fjwt from '@fastify/jwt'
 import fastifyStatic from '@fastify/static'
 import { existsSync, mkdirSync } from 'node:fs'
@@ -29,7 +30,9 @@ import { authRoutes } from './routes/auth.js'
 import { adminRoutes } from './routes/admin.js'
 import { auditAdminRoutes } from './routes/audit.js'
 import { auditIngestRoutes } from './routes/ingest-audit.js'
+import { oidcRoutes } from './routes/oidc.js'
 import { startAuditRetentionJob } from './services/audit-retention.js'
+import { ensureOidcSigningKey, resetOidcKeyCache } from './lib/oidc/keys.js'
 
 declare module 'fastify' {
   interface FastifyInstance {
@@ -100,6 +103,7 @@ export async function buildApp(opts: {
   app.decorate('sqlite', sqlite)
 
   await app.register(sensible)
+  await app.register(formbody)
   await app.register(cors, { origin: true, credentials: true })
   await app.register(helmet, { contentSecurityPolicy: false })
   await app.register(rateLimit, { max: 200, timeWindow: '1 minute' })
@@ -117,11 +121,14 @@ export async function buildApp(opts: {
 
   app.get('/api/v1/health', async () => ({ ok: true, service: 'auth-portal' }))
 
+  resetOidcKeyCache()
+  await ensureOidcSigningKey(app)
   await ensureBootstrapAdmin(app)
   await app.register(authRoutes)
   await app.register(adminRoutes)
   await app.register(auditAdminRoutes)
   await app.register(auditIngestRoutes)
+  await app.register(oidcRoutes)
 
   if (process.env.NODE_ENV !== 'test') {
     const stopRetention = startAuditRetentionJob(app)