Identity & Access Integration Tests 🔐

Integration tests for identity and access surfaces: OAuth2 / OIDC configuration invariants (mutual exclusion, ACL shape, proxy port allocation, RBAC group-path declarations) and password / secret quoting rules.

Each child directory pins one IAM surface; see the per-directory README for scope. Generic OIDC-redirect URI checks and domain rules live under meta/domains/; port allocations live under tests/integration/ports/ once introduced.

For framework and make test-integration usage see integration.md.