Returns the read-only OIDC callback and SAML ACS URLs the deployment derives from its public-edge base URL (base + fixed edge path, trailing-slash normalized). These are the values the operator must register with the external IdP — never operator free-text. Required scope: admin.platform.idp.manage.