#30641 [Feature]: Surface Helm/env-configured SSO settings in the Admin UI (treat declarative config as a first-class citizen)
### Check for existing issues
- [x] I have searched the existing issues and checked that my issue is not a duplicate.
### The Feature
## Check for existing issues
- [x] I have searched the existing issues and checked that this is not a duplicate.
Related but distinct: - #11623 (config-file models intermittently appear/disappear in the UI under `STORE_MODEL_IN_DB`) - #15061 (UI-created MCP servers non-functional when `STORE_MODEL_IN_DB=false`) - #25770 (cannot change `ui_settings` from the UI when store-models-in-db is disabled) - #19312 / #19620 (SSO role mapping / role sync) — these concern role propagation, not config visibility.
None of these track the gap below: SSO providers configured declaratively (env vars / Helm values / `proxy_config.yaml`) are not reflected in the Admin UI's SSO settings.
## The problem
When SSO is configured declaratively rather than through the UI, e.g. via the official env-var approach:
```yaml # Helm values -> rendered into the Deployment env env: GENERIC_CLIENT_ID: "..." GENERIC_CLIENT_SECRET: "..." GENERIC_AUTHORIZATION_ENDPOINT: "https://idp.example.com/auth" GENERIC_TOKEN_ENDPOINT: "https://idp.example.com/token" GENERIC_USERIN…