Rework Authentication into separate services

[jtojnar]

This is a from-scratch rewrite, moving a bit closer to Single Responsibility Principle.

We split handling of credentials-in-config and always-open authentication systems. In the future, we will be able implement more methods this way.

This was motivated by session code being called in constructor would break in CLI with Tracy strict mode.

Additionally:

• Session verification now also checks if the credentials in the config did not change.
• Requests from local IP now give full access to all operations, not just update.

[netlify[bot]]

✅ Deploy Preview for selfoss canceled.

Name	Link
🔨 Latest commit	a36d70623dc1794785c5e955d0aef7a9712c0ccb
🔍 Latest deploy log	https://app.netlify.com/sites/selfoss/deploys/668f389690e46e00084d30ed