fix auth exposure and release workflows

[phenix3443]

Summary

• hide unsupported or incompletely configured auth methods from the public global config response, and reject disabled or incomplete OAuth login requests
• avoid blocking server startup when the GeoIP database is missing by continuing without GeoIP support
• update GitHub Actions to use newer checkout/login actions, publish release images to GHCR, and trigger the matching ppanel packaging workflow after releases

Validation

• no additional local validation was run for this metadata update