0.4.1

Added

• OIDC_INTERNAL_URL: the OIDC issuer as the frontend server reaches it, for
  containers where the browser-facing OIDC_ISSUER doesn't resolve from inside
  (Docker Compose, Kubernetes). Discovery is fetched from it.

Fixed

• Sign-in no longer stays broken with "Provider not found" when the OIDC provider
  was unreachable while the frontend started: discovery is retried until it
  succeeds, and the login screen says when the provider is unreachable.