Debian 13 with OIDC fix (#8032)

Follow-up of https://github.com/FreshRSS/FreshRSS/pull/7772
fix https://github.com/FreshRSS/FreshRSS/issues/7860
fix https://github.com/FreshRSS/FreshRSS/issues/7798
Follow-up of https://github.com/FreshRSS/FreshRSS/pull/7805

PHP 8.4.11, Apache 2.4.65
* https://wiki.debian.org/DebianTrixie
* https://www.debian.org/releases/testing/release-notes/whats-new.en.html
* https://downloads.apache.org/httpd/CHANGES_2.4

And thanks to @CrazyWolf13 for [the debugging](https://github.com/OpenIDC/mod_auth_openidc/discussions/1349#discussioncomment-14542930)!

Co-authored-by: Tobias <96661824+CrazyWolf13@users.noreply.github.com>

Docker/Dockerfile

@@ -1,4 +1,4 @@
-FROM debian:12-slim
+FROM debian:13-slim
 
 ENV TZ=UTC
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]

Docker/FreshRSS.Apache.conf

@@ -31,9 +31,9 @@ CustomLog "|/var/www/FreshRSS/cli/sensitive-log.sh" combined_proxy
 	OIDCClientID ${OIDC_CLIENT_ID}
 	OIDCClientSecret ${OIDC_CLIENT_SECRET}
 
-    OIDCSessionInactivityTimeout ${OIDC_SESSION_INACTIVITY_TIMEOUT}
-    OIDCSessionMaxDuration ${OIDC_SESSION_MAX_DURATION}
-    OIDCSessionType ${OIDC_SESSION_TYPE}
+	OIDCSessionInactivityTimeout ${OIDC_SESSION_INACTIVITY_TIMEOUT}
+	OIDCSessionMaxDuration ${OIDC_SESSION_MAX_DURATION}
+	OIDCSessionType ${OIDC_SESSION_TYPE}
 
 	OIDCRedirectURI /i/oidc/
 	OIDCCryptoPassphrase ${OIDC_CLIENT_CRYPTO_KEY}
@@ -57,8 +57,7 @@ CustomLog "|/var/www/FreshRSS/cli/sensitive-log.sh" combined_proxy
 		OIDCXForwardedHeaders ${OIDC_X_FORWARDED_HEADERS}
 	</IfDefine>
 
-	# Can be overridden e.g. in /var/www/FreshRSS/p/i/.htaccess
-	OIDCRefreshAccessTokenBeforeExpiry 30
+	# Additional parameters can be set e.g. in /var/www/FreshRSS/p/i/.htaccess
 </IfDefine>
 
 <Directory />