SSO and auth surface. The /sso endpoint now returns one login option per identity provider instead of duplicating entries, and documentation for sso_identity_providers is expanded alongside safer response handling. The API also learned to accept X-Auth-Token as an authentication fallback, broadening how clients can present a Keystone token.

Glance client fixes. Two bugs in the Glance path were addressed: the client was picking the wrong region's endpoint, and filters passed to list_images() were being silently dropped. A follow-up adds unit tests covering the filter-handling logic to keep it from regressing.

Elsewhere. skyline-policy-manager's generate-rule output format was corrected, and a stray typo fix rounds out the week.