d3e98c51

By: Michael Lynch <git@mtlynch.io>

Move SessionManager and LoginTokenCreator to auth_service.go

These types are only consumed by authService. Colocating them with their
consumer makes the dependency clearer and keeps server.go focused on
Server wiring.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>