[Feature Request] Allow setting up OIDC without any local accounts

[Kernald]

Given that OIDC allows granting admin permissions through group claims, it would be nice not requiring a local admin account at all when OIDC is enabled, especially through environment variables - having user management entirely done through OIDC would be much nicer.