АРХ - NODEDC PLATFORM: bootstrap Authentik applications

docs/DEPLOYMENT_LOCAL.md

@@ -97,6 +97,27 @@ cd /Users/dcconstructions/Downloads/mnt/NODEDC/platform
 docker compose --env-file infra/.env -f infra/docker-compose.dev.yml up -d
 ```
 
+## Authentik bootstrap
+
+After Authentik is healthy, bootstrap local NODE.DC identity objects:
+
+```bash
+NODEDC_BOOTSTRAP_ADMIN_EMAIL=dcctouch@gmail.com infra/scripts/bootstrap-authentik-dev.sh
+```
+
+This creates:
+
+- `nodedc:superadmin`;
+- `nodedc:launcher:admin`;
+- `nodedc:launcher:user`;
+- `nodedc:taskmanager:admin`;
+- `nodedc:taskmanager:user`;
+- `NODE.DC Launcher` application with OAuth2/OIDC provider;
+- `NODE.DC Task Manager` application with OAuth2/OIDC provider;
+- group bindings for application access.
+
+The script fills missing `LAUNCHER_OIDC_CLIENT_SECRET` and `PLANE_OIDC_CLIENT_SECRET` values in ignored `infra/.env`. Secrets are not committed.
+
 Проверка:
 
 ```bash