refactor(keycloak): remove authentik naming and switch to keycloak-only paths

backend/app/schemas/auth.py

@@ -1,7 +1,7 @@
 from pydantic import BaseModel, Field
 
 
-class AuthentikPrincipal(BaseModel):
+class KeycloakPrincipal(BaseModel):
     sub: str
     email: str | None = None
     name: str | None = None

backend/app/schemas/catalog.py

@@ -90,7 +90,7 @@ class MemberUpsertRequest(BaseModel):
     email: str | None = None
     display_name: str | None = None
     is_active: bool = True
-    sync_to_authentik: bool = True
+    sync_to_idp: bool = True
 
 
 class MemberUpdateRequest(BaseModel):
@@ -98,7 +98,7 @@ class MemberUpdateRequest(BaseModel):
     email: str | None = None
     display_name: str | None = None
     is_active: bool | None = None
-    sync_to_authentik: bool = True
+    sync_to_idp: bool = True
 
 
 class MemberPasswordResetResponse(BaseModel):

backend/app/schemas/idp_admin.py

@@ -1,7 +1,7 @@
 from pydantic import AliasChoices, BaseModel, Field
 
 
-class AuthentikEnsureUserRequest(BaseModel):
+class KeycloakEnsureUserRequest(BaseModel):
     user_sub: str | None = Field(default=None, validation_alias=AliasChoices("user_sub", "sub"))
     username: str | None = None
     email: str
@@ -9,6 +9,6 @@ class AuthentikEnsureUserRequest(BaseModel):
     is_active: bool = True
 
 
-class AuthentikEnsureUserResponse(BaseModel):
+class KeycloakEnsureUserResponse(BaseModel):
     idp_user_id: str
     action: str