Pagegoat Better Auth IdP — see /api/auth/.well-known/openid-configuration and /login