fix: IAM warning, nginx doc, fail-fast IAM_API_URL + bump 0.5.20

- src/routes/oidc.js: console.error при IAM fallback вместо warn
- server.js: проверка IAM_API_URL в production mode
- docs/devops-deploy.md: X-Forwarded-Proto в nginx config

src/routes/oidc.js

@@ -73,7 +73,8 @@ function createRouter({ auth, doubleCsrfProtection, generateCsrfToken, authLimit
         console.log('[oidc] IAM enrichment OK:', iamData.email, iamData.clientId, 'profiles:', iamData.allClientIds.length);
       } catch (iamErr) {
         // IAM недоступен — используем fallback из JWT
-        console.warn('[oidc] IAM enrichment failed, using JWT fallback:', iamErr.message);
+        console.error('[oidc] ⚠️ IAM API UNAVAILABLE — falling back to JWT claims:', iamErr.message);
+        console.error('[oidc]    User company/isAdmin may be incorrect — profiles[] not available');
         const rawClientId = payload.ClientID || payload.client_id || '';
         const allClientIds = rawClientId.split(',').map(s => s.trim()).filter(Boolean);
         const activeClientId = allClientIds[0] || rawClientId || 'UNKNOWN';