Drop temporary logging used to diagnose OIDC groups sync in dev.
Register and sign-in call apply_admin_role_from_user_info; users in configured admin group get Admin role, others get Mitglied. Internal User action + bypass policy.