web: Z-Index Fixes, Mobile Sidebar Behavior. (cherry-pick #19460 to version-2025.12)

[authentik-automation]

Cherry-pick of #19460 to version-2025.12 branch.

Original PR: #19460
Original Author: @GirlBossRush
Cherry-picked commit: 0f11ad6

[netlify]

✅ Deploy Preview for authentik-integrations ready!

Name	Link
🔨 Latest commit	064f52c
🔍 Latest deploy log	https://app.netlify.com/projects/authentik-integrations/deploys/69696b4176fd4500087a1cf1
😎 Deploy Preview	https://deploy-preview-19492--authentik-integrations.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.27%. Comparing base (4d881bb) to head (064f52c).
⚠️ Report is 2 commits behind head on version-2025.12.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@                 Coverage Diff                 @@
##           version-2025.12   #19492      +/-   ##
===================================================
- Coverage            93.28%   93.27%   -0.01%     
===================================================
  Files                  946      946              
  Lines                52209    52209              
===================================================
- Hits                 48702    48700       -2     
- Misses                3507     3509       +2     

Flag	Coverage Δ
e2e	44.59% <ø> (-0.04%)	⬇️
integration	23.59% <ø> (+<0.01%)	⬆️
unit	91.55% <ø> (+<0.01%)	⬆️
unit-migrate	91.59% <ø> (+<0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-064f52cfe4e7a86c908d549449cb1c7cb21618d1
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-064f52cfe4e7a86c908d549449cb1c7cb21618d1

Afterwards, run the upgrade commands from the latest release notes.