v0.4.0

Added

• The web UI's authentication config is now served at runtime from GET /config.json, sourced from auth.issuer, auth.client_id, and auth.audience in ~/.pvdata.toml. The published Docker image works for any OIDC tenant without rebuilding — drop in your config and restart.

Changed

• Authentication is now provider-agnostic. The backend reads auth.issuer, auth.jwks_url, and auth.audience instead of auth.domain / auth.client_id, so Auth0, Zitadel, Keycloak, or any standards-compliant OIDC provider works with the same binary. Migration: existing deployments using auth.domain / auth.client_id need to update to the new keys.
• The Docker image now builds the Vue UI as part of the image build, so the published pennyvault/pvdata no longer ships with broken asset references.

Fixed

• pvdata serve no longer hangs on shutdown when SSE clients (run-event streams, data-quality run streams) are connected or when a subscription is in-flight. Shutdown is now bounded to roughly 45 seconds worst-case.

Full changelog: v0.3.0...v0.4.0