**Purpose:** Lightweight IAM profile implementation for NetKingdom — "prepare for Keycloak without Keycloak". Implements the NetKingdom IAM Profile (OIDC/PKCE) via Authelia + LLDAP + privacyIDEA, with migration path to Keycloak in expanded mode.

**Domain:** netkingdom
**Repo slug:** key-cape
**Topic ID:** a6c6e745-bf54-4465-9340-1534a2be493e