feat(auth): forward-auth + OIDC bearer middleware with shared allowlist
feat(http): chi server with middleware stack + RFC 7807 problem renderer