fix: core-cli OAuth2 + S3 backend + admin group

- Link core-cli app to OAuth2 provider (was hardcoded to 0)
- Add core-cli user to authentik_admins for CI access
- Fix terraform init: use 'endpoint' not 'endpoints.s3' for S3 backend
  (Terraform 1.9.4 compatibility, matches state.tf config)

terraform/authentik-generated.tf

@@ -25,7 +25,7 @@ resource "authentik_group" "authentik_admins" {
   name         = "authentik Admins"
   parent       = null
   roles        = null
-  users        = [5, 4]
+  users        = [5, 4, 38]
 }
 
 # __generated__ by Terraform from "5"
@@ -137,7 +137,7 @@ resource "authentik_application" "core_cli_app" {
   name                  = "core-cli"
   open_in_new_tab       = false
   policy_engine_mode    = "any"
-  protocol_provider     = 0
+  protocol_provider     = authentik_provider_oauth2.core_cli_provider.id
   slug                  = "core-cli"
   uuid                  = "f15c69b4-414b-49da-9e65-eef0a0dbf1ee"
 }