feat: move sso and ldap logins into plugins (C2)

plugins/sso/migrations/mysql/0001_adopt_sso_providers.sql

@@ -0,0 +1,14 @@
+-- sso 0001: adopt_sso_providers
+-- Generated by termix-plugin migrations. Review before committing.
+
+CREATE TABLE IF NOT EXISTS `sso_providers` (
+  `id` int AUTO_INCREMENT PRIMARY KEY,
+  `name` text NOT NULL,
+  `type` text NOT NULL,
+  `enabled` boolean NOT NULL DEFAULT true,
+  `display_order` int NOT NULL DEFAULT 0,
+  `config` text NOT NULL,
+  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
+  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP)
+);
+RENAME TABLE `sso_providers` TO `p_sso_providers`;

plugins/sso/migrations/mysql/0002_legacy_callback.sql

@@ -0,0 +1,7 @@
+-- sso 0002: legacy_callback
+-- Generated by termix-plugin migrations. Review before committing.
+
+ALTER TABLE `p_sso_providers` ADD COLUMN `legacy_callback` boolean NOT NULL DEFAULT false;
+-- Providers that existed before 2.9 were registered with the identity
+-- provider under /users/oidc/callback, so they keep sending that URI.
+UPDATE `p_sso_providers` SET `legacy_callback` = true;