fix(lasuite): configure people for Production Django settings and correct OIDC redirect URI

- oidc-clients.yaml: change people redirect URI from /oidc/callback/ to
  /api/v1.0/callback/ (the actual path the Django app registers)
- people-values.yaml: set DJANGO_CONFIGURATION=Production so Django trusts
  X-Forwarded-Proto from Pingora and generates https:// URLs; add
  ALLOWED_HOSTS and DJANGO_CSRF_TRUSTED_ORIGINS for the people subdomain

base/lasuite/oidc-clients.yaml

@@ -119,7 +119,7 @@ spec:
     - code
   scope: openid email profile
   redirectUris:
-    - https://people.DOMAIN_SUFFIX/oidc/callback/
+    - https://people.DOMAIN_SUFFIX/api/v1.0/callback/
   tokenEndpointAuthMethod: client_secret_basic
   secretName: oidc-people
   skipConsent: true

base/lasuite/people-values.yaml

@@ -118,6 +118,11 @@ backend:
       secretKeyRef:
         name: people-django-secret
         key: DJANGO_SECRET_KEY
+    # Production settings class enables SECURE_PROXY_SSL_HEADER so Django builds
+    # https:// URLs when Pingora forwards X-Forwarded-Proto: https.
+    DJANGO_CONFIGURATION:      Production
+    # Production's ALLOWED_HOSTS reads ALLOWED_HOSTS (no DJANGO_ prefix).
+    ALLOWED_HOSTS:             people.DOMAIN_SUFFIX
     DJANGO_ALLOWED_HOSTS:      people.DOMAIN_SUFFIX
     DJANGO_CSRF_TRUSTED_ORIGINS: https://people.DOMAIN_SUFFIX