Add provider-neutral Google authentication

k8s/base/api-deployment.yaml

@@ -56,6 +56,16 @@ spec:
                 secretKeyRef:
                   name: step3-runtime-secrets
                   key: stripe-webhook-secret
+            - name: Google__ClientId
+              valueFrom:
+                secretKeyRef:
+                  name: step3-runtime-secrets
+                  key: google-client-id
+            - name: Google__ClientSecret
+              valueFrom:
+                secretKeyRef:
+                  name: step3-runtime-secrets
+                  key: google-client-secret
           resources:
             requests:
               cpu: 250m
@@ -79,4 +89,3 @@ spec:
             periodSeconds: 20
             timeoutSeconds: 3
             failureThreshold: 3
-

k8s/overlays/prd/kustomization.yaml

@@ -20,6 +20,8 @@ configMapGenerator:
       - PasswordReset__Enabled=false
       - Steam__Realm=https://s3q.ranaze.com
       - Steam__ReturnUrl=https://s3q.ranaze.com/api/Auth/steam/callback
+      - ExternalAuth__SteamReturnUrl=https://s3q.ranaze.com/api/Auth/external/steam/callback
+      - Google__ReturnUrl=https://s3q.ranaze.com/api/Auth/external/google/callback
       - Legal__TermsVersion=2026-07-20
       - Legal__PrivacyVersion=2026-07-20
       - Legal__EffectiveUtc=2026-07-20T00:00:00Z

k8s/overlays/uat/kustomization.yaml

@@ -17,6 +17,8 @@ configMapGenerator:
       - PasswordReset__Enabled=false
       - Steam__Realm=https://us3q.ranaze.com
       - Steam__ReturnUrl=https://us3q.ranaze.com/api/Auth/steam/callback
+      - ExternalAuth__SteamReturnUrl=https://us3q.ranaze.com/api/Auth/external/steam/callback
+      - Google__ReturnUrl=https://us3q.ranaze.com/api/Auth/external/google/callback
       - Legal__TermsVersion=2026-07-20
       - Legal__PrivacyVersion=2026-07-20
       - Legal__EffectiveUtc=2026-07-20T00:00:00Z
@@ -26,4 +28,3 @@ configMapGenerator:
       - Stripe__CancelUrl=https://ustep3.ranaze.com/donation-canceled.html
 generatorOptions:
   disableNameSuffixHash: true
-