AI-Pay Identity Service (OIDC discovery: /.well-known/openid-configuration)