* add authentik devenv * remove direct dependency on spew * use cn * add authentik instructions * add backup instructions