Prohibit OAuth client auth for revoked clients

Print IP with "invalid source IP" authError

Add legacy webhooks worker implementation

Add test for internal auth

auth/middleware_test: test invalid auth cookie

Add basic auth tests

auth/middleware: fix printf suspension params

Import GQL server interfaces from gql.sr.ht