The identity provider's hostname changed. Only AUTHENTIK_ISSUER points at it,
so the live change is one line in .env.local; this commit carries the docs and
the example, which still named the old host.
The issuer string has to match the provider's own discovery document exactly,
trailing slash and all -- a host that answers is not the same as an issuer that
validates -- so the example now says how to check it. AUTH_URL is unrelated and
stays: it is this app's address, not Authentik's.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
create-next-app's .gitignore matches .env*, which takes the example with it.
The file documenting every variable the app needs was the one file in the
pattern that has to be tracked.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Ryan