[spike ticket] auth service implementation

[lululeon]

To support the frontend ticket around auth (eg https://github.com/colabco/cbld-web/issues/10 ) it will be necessary to implement an auth service in the backend.

Interested in service that:

• has passwordless login at best or social login at worst
• is price scalable for a free or BtoC app
• has great docs and ease of use
• supports resource tokens

acceptance criteria

• [x] write/update/refine necessary tickets

[lululeon]

Going with Lucia auth for it's simple, minimalist, open source, free ethos. Can add oauth integrations on top later.