Scenario: Deploy validation rejects missing auth config
Steps: Run scripts/validate-env.sh with missing OIDC var
Expected: Exits non-zero, names missing var

Output:
=== Validating Shared Directory Structure ===
✓ Shared directory exists: /tmp/innercontext/shared
✓ Shared backend .env exists: /tmp/innercontext/shared/backend/.env
✓ Shared frontend .env.production exists: /tmp/innercontext/shared/frontend/.env.production

=== Validating Symlinks in Current Release ===
✓ Symlink correct: /tmp/innercontext/current/backend/.env -> ../../../shared/backend/.env
✓ Symlink correct: /tmp/innercontext/current/frontend/.env.production -> ../../../shared/frontend/.env.production

=== Validating Backend Environment Variables ===
✓ DATABASE_URL is set
✓ GEMINI_API_KEY is set
⚠ LOG_LEVEL not found in /tmp/innercontext/shared/backend/.env (optional)
⚠ CORS_ORIGINS not found in /tmp/innercontext/shared/backend/.env (optional)
✗ OIDC_ISSUER not found in /tmp/innercontext/shared/backend/.env
✗ OIDC_CLIENT_ID not found in /tmp/innercontext/shared/backend/.env
✗ OIDC_DISCOVERY_URL not found in /tmp/innercontext/shared/backend/.env
✗ OIDC_ADMIN_GROUPS not found in /tmp/innercontext/shared/backend/.env
✗ OIDC_MEMBER_GROUPS not found in /tmp/innercontext/shared/backend/.env
⚠ OIDC_JWKS_CACHE_TTL_SECONDS not found in /tmp/innercontext/shared/backend/.env (optional)
⚠ BOOTSTRAP_ADMIN_OIDC_ISSUER not found in /tmp/innercontext/shared/backend/.env (optional)
⚠ BOOTSTRAP_ADMIN_OIDC_SUB not found in /tmp/innercontext/shared/backend/.env (optional)
⚠ BOOTSTRAP_ADMIN_EMAIL not found in /tmp/innercontext/shared/backend/.env (optional)
⚠ BOOTSTRAP_ADMIN_NAME not found in /tmp/innercontext/shared/backend/.env (optional)
⚠ BOOTSTRAP_HOUSEHOLD_NAME not found in /tmp/innercontext/shared/backend/.env (optional)

=== Validating Frontend Environment Variables ===
✓ PUBLIC_API_BASE is set
✓ ORIGIN is set
✗ SESSION_SECRET not found in /tmp/innercontext/shared/frontend/.env.production
✗ OIDC_ISSUER not found in /tmp/innercontext/shared/frontend/.env.production
✗ OIDC_CLIENT_ID not found in /tmp/innercontext/shared/frontend/.env.production
✗ OIDC_DISCOVERY_URL not found in /tmp/innercontext/shared/frontend/.env.production

✗ Found 9 error(s) in environment configuration
  And 8 warning(s)