feat(auth): integrate authentication with installation lifecycle

deploy/psd/operator.env.example

@@ -9,6 +9,7 @@ THT_WORKSPACE_GIT_KNOWN_HOSTS_FILE=<abs>/deploy/psd/secrets/git-known-hosts
 # App
 THT_SECRETS_FILE=<abs>/deploy/psd/secrets/thothii.secrets
 PI_AUTH_FILE=<abs>/deploy/psd/secrets/pi-auth.json
+THT_AUTH_CONFIG_ROOT=<abs>/deploy/psd/auth
 # DWH and Evidence credentials are entered later in Workspace management and stored encrypted
 # by the backend. They do not depend on host filesystem paths.
 
@@ -19,7 +20,6 @@ PI_THINKING=medium
 
 # App defaults
 THT_DWH_PRECHECK=true
-AUTH_MODE=none
 THOTH_PUBLIC_EXPOSURE=false
 MAX_PI_PROCESSES=4
 THOTH_HTTP_PORT=8080