make all services clusterIP to not expose them to public internet on gke or other cloud providers. can override for kind/local + metallb

got msft obo working

got obo working on a different cluster using locally controlled keycloak

updated get auth0 token script

initial spike of entra obo

use auth0

updated demo

updated obo demo, paused till we work out what well use for enterprise idp

updated elicitation docs

got elicitation working for github

got elicitation for databricks working!

fiddle with grafana

updated for 2.2.0 -- mostly complete still need to do elicitation and eager auth

first pass update enterprise to 2.2.0, still wip

first pass to update to agw 1.0-alpha4`