Add an OAuth setting that provisions newly registered users as Root team members without creating a personal team.
Add OIDC discovery, JWKS validation, Socialite integration, OAuth identity linking, and configurable registration policy for password and SSO signups. Update related settings/profile UI and tests.