Merge pull request olivierlambert#112 from teicee/feat-config-dump

feat: add 'config dump' CLI command

Author: olivierlambert

src/auth.rs

@@ -305,6 +305,9 @@ pub async fn delete_user(
 
 // --- Auth config helpers ---
 
+// Uses SELECT * intentionally: oidc_client_secret is encrypted at rest (AES-256-GCM)
+// and encrypted in memory. Accidental serialization is prevented by #[serde(skip)]
+// on the AuthConfig.oidc_client_secret field.
 pub async fn get_auth_config(pool: &SqlitePool) -> Result<AuthConfig> {
     let config =
         sqlx::query_as::<_, AuthConfig>("SELECT * FROM auth_config WHERE id = 'singleton'")