fix: WOPI registration on restart + Collabora readiness probes

- Add readiness/liveness probes to Collabora (GET /hosting/discovery)
- Add init container to Drive backend that waits for Collabora and runs
  trigger_wopi_configuration on every pod start — fixes WOPI silently
  breaking after server restarts (chart Job only ran on sunbeam apply)
- Add OIDC_RESPONSE_MODE=query to Projects config

base/lasuite/collabora-deployment.yaml

@@ -25,11 +25,20 @@ spec:
             # Public hostname — Collabora uses this in self-referencing URLs.
             - name: server_name
               value: "docs.DOMAIN_SUFFIX"
-            # TLS is terminated at Pingora; disable Collabora's built-in TLS.
+            # TLS terminated at Pingora. Production defaults for lang, UI, and perf.
             - name: extra_params
-              value: "--o:ssl.enable=false --o:ssl.termination=true"
+              value: >-
+                --o:ssl.enable=false
+                --o:ssl.termination=true
+                --o:default_language=en_GB
+                --o:user_interface.mode=tabbed
+                --o:autosave_duration_secs=120
+                --o:idlesave_duration_secs=15
+                --o:num_prespawn_children=2
+                --o:per_document.max_concurrency=4
+                --o:logging.level=warning
             - name: dictionaries
-              value: "en_US fr_FR"
+              value: "en_GB en_US fr_FR nl_NL pt_PT de_DE es_ES it_IT pl_PL sv_SE da_DK nb_NO fi_FI el_GR cs_CZ ro_RO hu_HU bg_BG hr_HR sk_SK sl_SI et_EE lv_LV lt_LT"
             - name: username
               valueFrom:
                 secretKeyRef:
@@ -40,6 +49,20 @@ spec:
                 secretKeyRef:
                   name: collabora-credentials
                   key: password
+          readinessProbe:
+            httpGet:
+              path: /hosting/discovery
+              port: 9980
+            initialDelaySeconds: 15
+            periodSeconds: 10
+            timeoutSeconds: 5
+          livenessProbe:
+            httpGet:
+              path: /hosting/discovery
+              port: 9980
+            initialDelaySeconds: 30
+            periodSeconds: 30
+            timeoutSeconds: 5
           securityContext:
             capabilities:
               add: