put UCAN bearer token auth in place

[benjaminbollen]

fit the UCAN verification code in the right place in the middleware / swagger; may require some figuring out; or asking around cc @expede

references:

• https://swagger.io/docs/specification/authentication/#multiple