Stateless OIDC authentication backend for Pipol. Verifies identity tokens and returns a stable secret for key derivation — no database required.