fix(auth): cambiar client_id de Keycloak de anexo76-frontend a hub-frontend

Anexo76 no es independiente del Hub/Workspace — comparten el mismo
cliente de Keycloak (hub-frontend). anexo76-frontend no existe en KC.

- Dockerfile.prod: agrega ARG/ENV VITE_KEYCLOAK_CLIENT_ID=hub-frontend
- workspace-auth.ts: actualiza fallback de 'anexo76-frontend' a 'hub-frontend'
- .env.example: actualiza a hub-frontend
- Jenkinsfile: pasa --build-arg VITE_KEYCLOAK_CLIENT_ID=hub-frontend al build

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Jenkinsfile

@@ -273,6 +273,7 @@ pipeline {
                                 docker build --progress=plain \
                                     --build-arg VITE_API_URL=\${A76_URL}/api/ \
                                     --build-arg VITE_KEYCLOAK_URL=\${A76_URL}/kcauth/ \
+                                    --build-arg VITE_KEYCLOAK_CLIENT_ID=hub-frontend \
                                     --build-arg INTERNAL_API_URL=http://backend:3467/api/ \
                                     -t ${IMAGE_FRONTEND}:${env.APP_VERSION} \
                                     -t ${IMAGE_FRONTEND}:latest \

frontend/.env.example

@@ -12,10 +12,10 @@ INTERNAL_HUB_URL=http://localhost:8001
 # Keycloak
 VITE_KEYCLOAK_URL=http://localhost:8085/kcauth
 VITE_KEYCLOAK_REALM=master
-VITE_KEYCLOAK_CLIENT_ID=anexo76-frontend
+VITE_KEYCLOAK_CLIENT_ID=hub-frontend
 KEYCLOAK_URL=http://localhost:8085/kcauth
 KEYCLOAK_REALM=master
-KEYCLOAK_CLIENT_ID=anexo76-frontend
+KEYCLOAK_CLIENT_ID=hub-frontend
 # KEYCLOAK_CLIENT_SECRET=  # solo si el cliente KC no es público
 
 # SvelteKit — necesario para cookies secure y URLs SSR correctas

frontend/Dockerfile.prod

@@ -22,6 +22,9 @@ ENV VITE_API_URL=${VITE_API_URL}
 ARG VITE_KEYCLOAK_URL
 ENV VITE_KEYCLOAK_URL=${VITE_KEYCLOAK_URL}
 
+ARG VITE_KEYCLOAK_CLIENT_ID=hub-frontend
+ENV VITE_KEYCLOAK_CLIENT_ID=${VITE_KEYCLOAK_CLIENT_ID}
+
 ARG INTERNAL_API_URL
 ENV INTERNAL_API_URL=${INTERNAL_API_URL}
 

frontend/src/lib/server/workspace-auth.ts

@@ -93,7 +93,7 @@ export function getKeycloakRealm(): string {
 }
 
 export function getKeycloakClientId(): string {
-	return (env.KEYCLOAK_CLIENT_ID || env.VITE_KEYCLOAK_CLIENT_ID || 'anexo76-frontend').trim();
+	return (env.KEYCLOAK_CLIENT_ID || env.VITE_KEYCLOAK_CLIENT_ID || 'hub-frontend').trim();
 }
 
 export function getCleanReturnPath(url: URL): string {