Authentication Troubleshooting

Document safe diagnostics for AiX Auth Service, Keycloak/OIDC, identity-provider connectivity, redirect/issuer configuration, claims and role mapping. Never record tokens or secrets.