Lucas BergerandClaude Sonnet 4.6
f5542dce10
Covers pre-auth /api/setup/* route surface, minimal-env-kernel + DB-backed config model, pre-OIDC local user + first-login-claims schema migration, defense-in-depth 423 guard, generate-secrets helper script, and explicit reconciliation of the SETUP-03 and D-09 deviations from the roadmap. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>