Fix OpenBao login falling back to token auth

Add synchronous redirect-bootstrap, direct KeyCape OIDC on sign-in, and mount
watching so the UI no longer lands on ?with=token when netkingdom is hidden
from unauthenticated mount listing. Document listing_visibility tune helper.

helm/openbao-ui-overlay/overlay.css

@@ -8,6 +8,9 @@ html.keycape-overlay-active label[for="custom-path"],
 html.keycape-overlay-active #namespace,
 html.keycape-overlay-active #role,
 html.keycape-overlay-active #custom-path,
+html.keycape-overlay-active #token,
+html.keycape-overlay-active #username,
+html.keycape-overlay-active #password,
 html.keycape-overlay-active select[name="auth-method"],
 html.keycape-overlay-active .auth-form .box.has-slim-padding.is-shadowless,
 html.keycape-overlay-active .auth-form .has-bottom-margin-s {