By: Michael Lynch <git@mtlynch.io>
Isolate shared secret authentication Move shared secret credential handling into a dedicated auth package and make handlers depend on a narrow authenticator interface. This keeps the HTTP layer independent of the current auth mechanism so a future replacement can plug in at the server boundary.