/login was prerendered at Docker build time when AUTH_OIDC_* were unset, baking oidcEnabled=false into the page. Force dynamic render and also read /api/v1/auth/config on the client as a fallback.
