MagicDNS routed all DNS through broken MCNS, making external services
(Claude, Gitea) unreachable. Disabling Tailscale was the correct
action to restore external DNS, not a mistake.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Incident reports go in log/ (operational work logs), not docs/
(architecture and reference documentation).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Add SSO redirect flow alongside direct credentials, MCIAS client
registration steps, [sso] config section, and updated service versions.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
