Address review feedback:
- Wire OIDCOptions through NewOIDCProvider instead of constructing
OIDCProvider manually
- Default AuthRequestResponseMode to form_post instead of overriding
GetLoginURL
- Drop the ValidateSession override in favour of the generic OIDC one
- Use options.AppleProvider constant in client secret validation
- Regenerate alpha config docs (appleConfig, authStyle)
- Fix CHANGELOG entry to reference #3293
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Signed-off-by: LYJW131 <lyjw2007@gmail.com>