This app authenticates via Keycloak using OpenID Connect.
GET / — this page (public)GET /me — your profile (any authenticated user)GET /admin — admin only (role: admin)GET /fresh-me — profile via token introspection (real-time roles)GET /login — start Keycloak loginGET /logout — logout