Route Buzz Guide login through Sudloh Account

.env.example

@@ -14,6 +14,15 @@ BETTER_AUTH_SECRET=replace-with-at-least-32-random-bytes
 # Separate trusted browser origins with commas for local development or proxies.
 BETTER_AUTH_TRUSTED_ORIGINS=http://localhost:3000
 
+# Optional Sudloh Account sign-in. Register the exact HTTPS callback before enabling.
+# Leave client ID and secret unset until the account service operator assigns them.
+SUDLOH_OIDC_ISSUER=https://account.sudloh.com/api/auth
+SUDLOH_OIDC_CLIENT_ID=
+SUDLOH_OIDC_CLIENT_SECRET=
+SUDLOH_OIDC_REDIRECT_URI=
+# Set only after migration and conflict review to route all new sign-ins through Sudloh.
+SUDLOH_OIDC_ONLY=false
+
 # Resend sending key; verify sudloh.com before sending from [email protected].
 RESEND_API_KEY=replace-with-resend-sending-key