fix(oidc): defer oidcCallback to prevent crash on startup

server.ts calls OidcService.initialize() inside the Express app setup, but
oidcRoutes.ts was calling OidcService.callback() at module-load time — before
initialize() had been called. This caused the server to crash immediately on
startup with "OidcService not initialized. Call initialize() first."

The fix wraps the callback in a lazy arrow function so it is only resolved
when the route handler fires, by which point initialize() has already run.
tsc --noEmit clean; server starts successfully after this change.
Co-authored-by: Cursor <cursoragent@cursor.com>

src/oidc/oidcRoutes.ts

@@ -3,7 +3,12 @@ import { OidcService } from './oidcService';
 
 const router = express.Router();
 
-const oidcCallback = OidcService.callback();
+// oidcCallback must be invoked lazily — OidcService.getInstance() is only
+// set after server.ts calls OidcService.initialize() during startup.
+// Calling it at module-load time (as a plain `const`) crashes the server.
+const oidcCallback = (req: express.Request, res: express.Response, next: express.NextFunction) => {
+	OidcService.callback()(req, res, next);
+};
 
 // /.well-known/openid-configuration
 router.get('/.well-known/openid-configuration', oidcCallback);