Log in redirects to the single external auth (Dex), custom JS adds a Sign up link to www.eom.dev/members, and a post-deploy task sets the oidc-cnr claims Dex sends (groups, preferred_username, name). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>