feat: Authentik login + switchable GPU prod target

Add OIDC auth for Command Center and runtime GPU endpoint selection
pointed at atc-gpu-prod (10.0.10.106), matching what is currently deployed.

api/node_ops.py

@@ -153,6 +153,25 @@ def build_node_detail(node_id: str, snap: dict[str, Any], workload_node: dict |
     wn = workload_node or {}
     agent_id = NODE_AGENT.get(node_id, "infra-sentinel")
 
+    if node_id == "gpu":
+        try:
+            from gpu_config import resolve_gpu_identity
+            gid = resolve_gpu_identity(snap.get("gpu") if isinstance(snap, dict) else None)
+            meta["ip"] = gid["ip"]
+            meta["vm"] = gid["vm"]
+            meta["vmid"] = gid["vmid"]
+            meta["ssh"] = f"ssh root@{gid['ip']}"
+            meta["links"] = [
+                {"label": "GPU Lab UI", "url": gid["ui_url"]},
+                {"label": "vLLM API", "url": gid["llm_url"]},
+            ]
+            meta["endpoints"] = [
+                {"name": "gpu-lab", "host": gid["ip"], "port": "9000", "proto": "http"},
+                {"name": "vllm", "host": gid["ip"], "port": "8001", "proto": "http"},
+            ]
+        except Exception:
+            pass
+
     detail: dict[str, Any] = {
         "id": node_id,
         "agent_id": agent_id,