Identity façade

SSO is ready for deployment configuration.

Set the server-only Cleture identity gateway variables in Vercel to activate this flow. Provider infrastructure remains behind the My Cleture interface.