Configure the Dex provider without auto-provisioning, so only users
the LDAP backend already sees (NextCloud Users) can sign in, and
redirect /login to Dex (/login?direct=1 for the password form).
Admit inetOrgPerson accounts from the membership site in the LDAP
user filter and set a 1 GB default quota.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>