Make Authentik the primary login method for Guacamole

Change EXTENSION_PRIORITY from "*,openid" to "openid,*" so
unauthenticated users are redirected to Authentik OIDC instead
of seeing the database login form.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

apps/guacamole/manifests/deployment-complete.yaml

@@ -85,7 +85,7 @@ spec:
             - name: ENABLE_WEBSOCKET
               value: "true"
             - name: EXTENSION_PRIORITY
-              value: "*,openid"
+              value: "openid,*"
             - name: OPENID_RESPONSE_TYPE
               value: "code"
             - name: OPENID_AUTHORIZATION_ENDPOINT