feat: decouple global AI configuration and update frontend with admin toggle

Hardening OIDC Auth: Resolve discovery deadlocks, implement identity sync, fix session persistence, and stabilize voice chat initialization

Refactor AI Config and Fix Login failure: Migrated services to a structured api directory, updated backend schemas for multiple TTS/STT providers, and improved settings/chat UI coverage.