feat(auth): integrate authentication with installation lifecycle

deploy/psd/operator.env.example

@@ -9,6 +9,7 @@ THT_WORKSPACE_GIT_KNOWN_HOSTS_FILE=<abs>/deploy/psd/secrets/git-known-hosts
 # App
 THT_SECRETS_FILE=<abs>/deploy/psd/secrets/thothii.secrets
 PI_AUTH_FILE=<abs>/deploy/psd/secrets/pi-auth.json
+THT_AUTH_CONFIG_ROOT=<abs>/deploy/psd/auth
 # DWH and Evidence credentials are entered later in Workspace management and stored encrypted
 # by the backend. They do not depend on host filesystem paths.
 
@@ -19,7 +20,6 @@ PI_THINKING=medium
 
 # App defaults
 THT_DWH_PRECHECK=true
-AUTH_MODE=none
 THOTH_PUBLIC_EXPOSURE=false
 MAX_PI_PROCESSES=4
 THOTH_HTTP_PORT=8080

deploy/psd/thothii-installation.yaml.example

@@ -8,5 +8,7 @@ workspaceRepository:
   remote: git@github.com:mptyl/tht-workspace-psd.git
   branch: main
   access: ssh
+authentication:
+  configDirectory: "<abs>/projects/ThothII/deploy/psd/auth"
 overrides:
   - "<abs>/projects/ThothII/deploy/compose.git-ssh.yaml"