feat: Authentik login + switchable GPU prod target

Add OIDC auth for Command Center and runtime GPU endpoint selection
pointed at atc-gpu-prod (10.0.10.106), matching what is currently deployed.

api/etl_offload.py

@@ -24,6 +24,7 @@ Endpoints:
 from __future__ import annotations
 
 import io
+import os
 import json
 import random
 import threading
@@ -46,9 +47,9 @@ DATASETS = [
 
 _lock = threading.Lock()
 _state: dict[str, Any] = {
-    "enabled": True,
-    "interval_s": 60.0,
-    "chunk": 5000,
+    "enabled": os.getenv("ETL_OFFLOAD_ENABLED", "1") not in ("0", "false", "False"),
+    "interval_s": float(os.getenv("ETL_OFFLOAD_INTERVAL_SECONDS", "30")),
+    "chunk": int(os.getenv("ETL_OFFLOAD_CHUNK", "20000")),
     "running_cycle": False,
     "started_at": None,
     "last_cycle_ts": 0.0,
@@ -440,8 +441,11 @@ def _loop() -> None:
         try:
             if _state["enabled"]:
                 run_cycle()
-        except Exception:
-            pass
+        except Exception as exc:
+            try:
+                _feed(f"cycle error: {str(exc)[:160]}", level="err")
+            except Exception:
+                pass
         time.sleep(max(10.0, float(_state["interval_s"])))