SSO vendor to deliver production credentials

What we need — production client ID, secret and signing certificate from Northbridge Identity.

Needed by 6 Aug 2027, which is two weeks before authentication testing starts. The two weeks are deliberate buffer, not padding.

Blocked by — I-05. The vendor will not issue credentials until the PO exists.

Fallback if it is late — continue on sandbox credentials and defer production authentication testing to the week of 20 Aug. That eats the whole buffer, so it works exactly once.