As we've seen on master it's very easy mistakenly make changes that
assume root URL paths. Run server integration tests at a non-root
issuer URL to prevent this.

*: add dockerfile

*: determine version from git

port the example app

proposals:  user objects for revoking refresh tokens and merging accounts

Add OpenID Connect connector

Remove api and ctl

It's not clear that the best way to manage clients is through a
gRPC based command line tool. For example we may explore an admin
dashboard and enable bootstrapping through static clients.

For now use static clients while we hold off on a more concrete
proposal.

Add ability to load clients statically from config file

storage/kubernetes: garbage collect expired objects