auth: lift oidc test stub into internal/testutil/oidcstub

feat(auth): forward-auth + OIDC bearer middleware with shared allowlist

feat(http): chi server with middleware stack + RFC 7807 problem renderer