🔒 refactor(bots): remove !login command and enforce OIDC-only auth

- Remove !login and !logout commands from all 16+ Matrix bots
- Remove login/logout references from all help/welcome messages
- Disable password login in Synapse (password_config.enabled: false)
- System is now OIDC-only via Mana Core authentication

Users must authenticate via "Sign in with Mana Core" in Element.
Existing bot access tokens remain valid.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

services/matrix-todo-bot/src/bot/matrix.service.ts

@@ -419,14 +419,6 @@ export class MatrixService
 				await this.sendReply(roomId, event, HELP_TEXT);
 				break;
 
-			case 'login':
-				await this.handleLogin(roomId, event, userId, args);
-				break;
-
-			case 'logout':
-				await this.handleLogout(roomId, event, userId);
-				break;
-
 			case 'add':
 			case 'neu':
 			case 'neue':
@@ -846,28 +838,6 @@ export class MatrixService
 		}
 	}
 
-	private async handleLogin(roomId: string, event: MatrixRoomEvent, userId: string, args: string) {
-		const parts = args.trim().split(/\s+/);
-		if (parts.length < 2) {
-			await this.sendReply(roomId, event, 'Verwendung: `login email passwort`');
-			return;
-		}
-
-		const [email, password] = parts;
-		const result = await this.sessionService.login(userId, email, password);
-
-		if (result.success) {
-			await this.sendReply(roomId, event, `Erfolgreich angemeldet als **${email}**`);
-		} else {
-			await this.sendReply(roomId, event, `Anmeldung fehlgeschlagen: ${result.error}`);
-		}
-	}
-
-	private async handleLogout(roomId: string, event: MatrixRoomEvent, userId: string) {
-		this.sessionService.logout(userId);
-		await this.sendReply(roomId, event, 'Erfolgreich abgemeldet.');
-	}
-
 	private async handlePinHelp(roomId: string, event: MatrixRoomEvent) {
 		try {
 			// Send help message

services/matrix-todo-bot/src/config/configuration.ts

@@ -38,8 +38,6 @@ export const HELP_TEXT = `🎯 **Todo Bot - Hilfe**
 **Sonstiges:**
 • \`status\` - Verbindungsstatus prüfen
 • \`hilfe\` - Diese Hilfe anzeigen
-• \`login email passwort\` - Anmelden für Synchronisation
-• \`logout\` - Abmelden
 
 **Tipp:** Alle Befehle funktionieren auch mit \`!\` davor (z.B. \`!neu\`)`;