Manyfold matches linked users on provider + uid, so the existing user's auth_uid was remapped to the Pocket ID user before deploying. HTTPS_ONLY is needed so Manyfold builds an https callback URL behind Caddy. The Authentik credentials stay in the vault for rollback. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>