Switch OpenCloud to internal authentication mode

- Enable internal IDP service (remove from OC_EXCLUDE_RUN_SERVICES)
- Enable demo users (IDM_CREATE_DEMO_USERS=true)
- Enable basic auth (PROXY_ENABLE_BASIC_AUTH=true)
- Remove opencloud init command (not needed with ConfigMap)
- Remove conflicting admin user overrides

OpenCloud now uses internal user management instead of external OIDC.
Demo users will be created on first startup (admin, einstein, marie).

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

apps/opencloud/opencloud-deployment.yaml

@@ -75,7 +75,7 @@ spec:
         command:
           - /bin/sh
           - -c
-          - "opencloud init || true; opencloud server"
+          - "opencloud server"
         env:
         # Basic configuration
         - name: OC_URL
@@ -91,9 +91,9 @@ spec:
         - name: PROXY_TLS
           value: "false"
 
-        # Exclude broken search service + internal IDP (using Pocket ID)
+        # Exclude broken search service only (using internal IDP)
         - name: OC_EXCLUDE_RUN_SERVICES
-          value: "idp,search"
+          value: "search"
 
         # Data paths
         - name: OPENCLOUD_BASE_DATA_PATH
@@ -392,21 +392,11 @@ spec:
               name: opencloud-config-secrets
               key: thumbnails-transfer-secret
 
-        # Demo users disabled (use external OIDC)
+        # Enable internal authentication
         - name: IDM_CREATE_DEMO_USERS
-          value: "false"
+          value: "true"
         - name: PROXY_ENABLE_BASIC_AUTH
-          value: "false"
-
-        # Admin user and role assignment (external IDP mode)
-        - name: GRAPH_ASSIGN_DEFAULT_USER_ROLE
-          value: "false"
-        - name: GRAPH_USERNAME_MATCH
-          value: "none"
-        - name: OC_ADMIN_USER_ID
-          value: ""
-        - name: SETTINGS_SETUP_DEFAULT_ASSIGNMENTS
-          value: "false"
+          value: "true"
 
         ports:
         - containerPort: 9200