Google SSO is selected but credentials are missing.
Mount GOOGLE_OIDC_* secrets and roll the revision.