Add option in "External OpenID Settings" disabling Enrollment other then External OIDC

[teon]

Add an option in OpenID -> External OpenID Settings: Disable enrollement other then External OIDC based. When this option is enabled there is only on proxy "Sign In with External SSO" available (and the default enrollment is disabled).