Resolve "Update to v2.7.0"

Closes #185 (closed)

Cherry-picks from upstream in this branch:

• fix: only call ORCID well known endpoint on settings page
• feat: store orcid auth endpoint in memory and refresh per hour
• minor: disable port mapping for frontend container in dev mode
• feat: distinguish between auth and coupling providers