Enterprise: hosted NiceGUI dashboard + SSO + webhooks

[itdove]

Description

Shared NiceGUI dashboard with SSO for team-wide visibility.

Hosted Deployment

• NiceGUI served on infrastructure (not just localhost)
• Same pages as MVP dashboard (NiceGUI dashboard (browser, individual CRUD, conflicts, sync status) #13), extended with team views
• SSO integration using same OIDC provider as Enterprise: OIDC auth + HTTP transport + RLS #18

New Views (beyond MVP dashboard)

• Team-wide browser — all entries across all team members
• Admin panel — manage hierarchy levels, repos, locked entries
• Audit log — cross-team knowledge_history view
• Conflict dashboard — org-wide conflict visibility

Webhook-Driven Sync

• GitHub/GitLab webhooks → instant sync (replaces polling)
• PR merged event → trigger sync for that repo
• Webhook endpoint on HTTP server

SSO

• Reuse OIDC provider from Enterprise: OIDC auth + HTTP transport + RLS #18
• Users authenticate via corporate IdP
• Role-based view filtering (admins see more)

Acceptance

• NiceGUI serves on hosted infrastructure (not just localhost)
• SSO authentication works
• Team-wide views show cross-member data
• Admin panel manages hierarchy and locks
• Webhook-driven sync triggers on PR merge
• Role-based view filtering

Dependencies

• NiceGUI dashboard (browser, individual CRUD, conflicts, sync status) #13 (NiceGUI dashboard — MVP version, pages reused)
• Enterprise: OIDC auth + HTTP transport + RLS #18 (OIDC auth — SSO reuses same provider)