Stop OpenBao login redirect loop by removing URL rewriting

Remove redirect-bootstrap and mount polling that fought Ember's token
fallback. Keep cosmetic overlay and direct KeyCape OIDC on sign-in only.

scripts/openbao-ui-overlay-apply.sh

@@ -27,7 +27,7 @@ if [ "${1:-}" = "-h" ] || [ "${1:-}" = "--help" ]; then
   exit 0
 fi
 
-for required in overlay.css overlay.js redirect-bootstrap.js presets.json nginx.conf VERSION; do
+for required in overlay.css overlay.js presets.json nginx.conf VERSION; do
   if [ ! -f "$OVERLAY_DIR/$required" ]; then
     echo "missing overlay asset: $OVERLAY_DIR/$required" >&2
     exit 1
@@ -47,7 +47,6 @@ $KUBECTL create configmap openbao-ui-overlay \
   --namespace "$OPENBAO_NAMESPACE" \
   --from-file="$OVERLAY_DIR/overlay.css" \
   --from-file="$OVERLAY_DIR/overlay.js" \
-  --from-file="$OVERLAY_DIR/redirect-bootstrap.js" \
   --from-file="$OVERLAY_DIR/presets.json" \
   --from-file="$OVERLAY_DIR/VERSION" \
   --dry-run=client -o yaml | $KUBECTL apply -f -

scripts/openbao-verify-login-overlay.sh

@@ -58,11 +58,6 @@ overlay_js="$(curl -fsS "$BASE_URL/ui/platform-overlay/overlay.js")"
 overlay_css="$(curl -fsS "$BASE_URL/ui/platform-overlay/overlay.css")"
 presets_json="$(curl -fsS "$BASE_URL/ui/platform-overlay/presets.json")"
 
-require_pattern \
-  "index.html injects redirect bootstrap" \
-  "$index_html" \
-  '/ui/platform-overlay/redirect-bootstrap\.js'
-
 require_pattern \
   "index.html injects overlay.js" \
   "$index_html" \