pub async fn require_auth( request: Request<Body>, next: Next, ) -> Result<Response, StatusCode>
Axum middleware layer that enforces Bearer token auth on every request except public paths.