Each tenant config now includes oidcClientId. Auth composable reads client ID from tenant config instead of hardcoded fallback. Dev tenant uses restricted Zitadel project (role-check enabled, developer grant). Added NODE_ENV=production to env files to fix --mode dev builds. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>