v1.22.3

Apostol CSMS OAuth2 SPA — csms-auth public image.

Pull: docker pull ghcr.io/apostol-csms/csms-auth:v1.22.3

Brand identity (logo, name, theme, OAuth2 client_id / scope) is
delivered at runtime via the license attestation chain — see
Phase 8 of the public-frontend-images plan. Legacy VITE_*
build-args remain on the Dockerfile for backwards compat with
v0.9.x brand-side builds; they default to empty in this image.

Full Changelog: v1.10.0...v1.22.3