Expand description
Bearer-token auth helper. Validates against the
LongLivedTokenStore on SharedState (audit fix HC-01/02).
- P1 placeholder accepted any non-empty bearer
- P2 (this commit) requires the token to be present in the store
- DEV escape hatch:
LongLivedTokenStore::allow_any_non_empty()preserves the legacy behaviour for users mid-migration, with a warn log on every check