Public or private instance visibility with OIDC login

Hive now supports a HIVE_VISIBILITY setting that makes an instance either public (anyone can browse) or private (login required). Private instances gate the dashboard through an authentication plug and redirect visitors to a configurable OIDC login flow. Public instances can still show optional sign-in buttons when providers are configured, so visitors can browse freely while authenticated users get their sessions.