fix(ambient-api-server): run as non-root and add OIDC secret placeholders

components/ambient-api-server/Dockerfile

@@ -30,6 +30,8 @@ COPY --from=builder /workspace/ambient-api-server /usr/local/bin/
 
 EXPOSE 8000
 
+USER 1001
+
 ENTRYPOINT ["/usr/local/bin/ambient-api-server", "serve"]
 
 LABEL name="ambient-api-server" \

components/manifests/base/platform/ambient-api-server-secrets.yml

@@ -25,6 +25,8 @@ metadata:
 type: Opaque
 stringData:
   sentry.key: ""
+  clientId: ""
+  clientSecret: ""
 
 ---
 apiVersion: v1