Declare approved Forgejo public PKCE development sign-in profile

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a15302-b965-7d43-a9d8-42710914b24e

helm/forgejo-values.yaml

@@ -84,6 +84,13 @@ preExtraInitContainers:
   terminationMessagePolicy: File
 
 gitea:
+  oauth:
+    - name: netkingdom
+      provider: openidConnect
+      key: forgejo
+      secret: ""
+      autoDiscoverUrl: https://kc.coulomb.social/.well-known/openid-configuration
+      scopes: openid,profile,email,groups
   admin:
     username: forgejo_admin
     email: admin@coulomb.social
@@ -98,6 +105,10 @@ gitea:
           name: forgejo-mailer
           key: MAILER_PASSWD
   config:
+    oauth2_client:
+      ENABLE_AUTO_REGISTRATION: false
+      ACCOUNT_LINKING: login
+      OPENID_CONNECT_SCOPES: openid profile email groups
     database:
       DB_TYPE: postgres
       HOST: forgejo-db-rw.databases.svc.cluster.local:5432