this happens because your proxy auth forward requests from CODE to Authentik, which brakes the WOPI integration. Please review Collabora integration guide and pay attention at “communication triangle”
I would not recommend proxy auth for NC (or at least you need extra work to bypass CODE requests). Authentik and NC both support openidconnect which is intended for external IdP integration.