feat(templates): add final six auth starters

auth_samples_astro/.env.example

@@ -0,0 +1,6 @@
+TUURIO_ISSUER=https://YOUR_TENANT.id.tuurio.com
+TUURIO_CLIENT_ID=YOUR_CLIENT_ID
+TUURIO_CLIENT_SECRET=
+TUURIO_REDIRECT_URI=http://localhost:4321/auth/callback
+TUURIO_POST_LOGOUT_REDIRECT_URI=http://localhost:4321/logout/callback
+TUURIO_SCOPE=openid profile email

auth_samples_astro/.gitignore

@@ -0,0 +1,5 @@
+node_modules/
+dist/
+.astro/
+.env
+.env.local

auth_samples_astro/README.md

@@ -0,0 +1,13 @@
+# Astro OIDC authentication with Tuurio ID
+
+Runnable Astro Node-server starter with Authorization Code + PKCE S256, validated ID tokens, UserInfo subject binding, opaque server-side sessions, a protected page, and RP-initiated logout.
+
+## Configure
+
+```bash
+npx manage-tuurio-id@1.1.6 init --framework astro --project-dir . --auth browser --yes --output json --campaign github_astro --no-open --no-wait
+npm install
+npm run dev
+```
+
+The in-memory transaction/session stores are intentionally visible sample infrastructure. Replace them with a shared server-side store before horizontal scaling. Keep `TUURIO_CLIENT_SECRET` server-only.

auth_samples_astro/astro.config.mjs

@@ -0,0 +1,4 @@
+import { defineConfig } from 'astro/config';
+import node from '@astrojs/node';
+
+export default defineConfig({ output: 'server', adapter: node({ mode: 'standalone' }) });