Merge branch 'dev' into feature/mcp

docs/installation/index.md

@@ -60,4 +60,6 @@ For OIDC login (overrides password login):
 - `HOMEPAGE_EXTERNAL_URL` (external URL to your Homepage instance; used for callbacks)
 - Optional: `HOMEPAGE_OIDC_NAME` (display name), `HOMEPAGE_OIDC_SCOPE` (defaults to `openid email profile`)
 
-All app pages and `/api` routes will require a signed-in session. Static assets remain public. Homepage still does not implement per-user dashboards or roles; authentication is a simple gate only.
+All app pages and `/api` routes except `/api/healthcheck` will require a signed-in session. Static assets remain public.
+
+Configure your OIDC provider with the a callback URI like `https://homepage.example.com/api/auth/callback/homepage-oidc`.

docs/widgets/services/arcane.md

@@ -16,3 +16,5 @@ widget:
   key: your-api-key
   fields: ["running", "stopped", "total", "image_updates"] # optional
 ```
+
+Using an api key for the widget requires permissions for: `containers:list` `images:list and `image-updates:read`