Harden compliance portal auth and TLS

Align console references and OAuth branding with the
compliance-page model, and fix certificate cache eviction,
portal OAuth handlers, and magic-link edge cases left after
the trust-center rename.

Signed-off-by: Bryan Frimin <bryan@probo.com>

pkg/coredata/migrations/20260706T132923Z.sql

@@ -24,6 +24,7 @@ INSERT INTO trust_centers (
     tenant_id,
     active,
     slug,
+    search_engine_indexing,
     created_at,
     updated_at
 )
@@ -41,6 +42,7 @@ SELECT
             '\s+', '-', 'g'
         )
     ),
+    'NOT_INDEXABLE',
     NOW(),
     NOW()
 FROM organizations o