auth: integrate oidcstub as opt-in dev OP under auth.oidc.dev_stub

auth: lift oidc test stub into internal/testutil/oidcstub

feat(auth): forward-auth + OIDC bearer middleware with shared allowlist

feat(http): chi server with middleware stack + RFC 7807 problem renderer