Finalizing OIDC Hardening: Standardize JWT library, resolve auth deadlock in MCP, and fix streaming security headers

Refactor AI Config and Fix Login failure: Migrated services to a structured api directory, updated backend schemas for multiple TTS/STT providers, and improved settings/chat UI coverage.