Add OIDC identity provider for the 3AG suite

[SourovCodes]

Summary

• Turn Accounts into the suite identity provider with Fortify (Blade), Passport, and OpenID Connect
• First-party clients auto-approve; discovery, JWKS, userinfo, and id_token claims are available for SalesReport and later apps
• Seed a SalesReport OIDC client and home page links for the suite apps

Test plan

• php artisan migrate --force && php artisan passport:keys --force && php artisan db:seed --class=OidcClientSeeder
• Confirm GET /.well-known/openid-configuration returns issuer, authorize, token, userinfo, and jwks
• Register or use the seeded test user and complete an authorization-code + PKCE flow against the SalesReport redirect URI
• Run php artisan test

Made with Cursor