By: Michael Lynch <git@mtlynch.io>
Move SessionManager and LoginTokenCreator to auth_service.go These types are only consumed by authService. Colocating them with their consumer makes the dependency clearer and keeps server.go focused on Server wiring. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>