feat: Authentik login + switchable GPU prod target

Add OIDC auth for Command Center and runtime GPU endpoint selection
pointed at atc-gpu-prod (10.0.10.106), matching what is currently deployed.

api/presentation.py

@@ -276,6 +276,17 @@ def build_presentation_payload(snap: dict[str, Any]) -> dict[str, Any]:
     ))
 
     gpus = gpu.get("gpus") or snap.get("gpu", {}).get("gpus") or []
+    try:
+        from gpu_config import resolve_gpu_identity
+        gpu_id = resolve_gpu_identity(snap.get("gpu") or gpu)
+    except Exception:
+        host = (snap.get("gpu") or gpu).get("host") or "10.0.10.106"
+        gpu_id = {
+            "vm": "atc-gpu-prod",
+            "vmid": 306,
+            "ui_url": f"http://{host}:9000",
+            "llm_url": f"http://{host}:8001/v1",
+        }
     gpu_lines = [
         f"GPU{g['index']}: {g.get('util_gpu', 0):.0f}% util, "
         f"{g.get('memory_used_mib', 0):.0f}/{g.get('memory_total_mib', 0):.0f} MiB"
@@ -284,11 +295,11 @@ def build_presentation_payload(snap: dict[str, Any]) -> dict[str, Any]:
     slides.append(_slide(
         "gpu",
         "GPU Lab & GenAI",
-        f"{gpu.get('model') or 'vLLM'} on atc-gpu-dev (VM 303)",
+        f"{gpu.get('model') or 'vLLM'} on {gpu_id['vm']} (VM {gpu_id['vmid']})",
         [
             f"Inference: {'ON' if gpu.get('inference_active') else 'OFF'}",
-            f"API: {snap.get('gpu', {}).get('vllm_url') or 'http://10.0.20.106:8001/v1'}",
-            "GPU Lab UI: http://10.0.20.106:9000",
+            f"API: {gpu_id['llm_url']}",
+            f"GPU Lab UI: {gpu_id['ui_url']}",
             "Kibana/Elastic: http://10.0.21.46:5601",
             *gpu_lines,
         ],