Kubernetes/OIDC: issuer auto-detection and jwks_url
Kubernetes: use rustfs in the in-cluster S3 example
Kubernetes: in-cluster S3 needs s3.publicURL for presigned uploads
Kubernetes: install from OCI registry, OpenShift note
Avoid semicolons
Add Kubernetes page; document OIDC scopes/rules, ca_file, bearer_token_file