feat/p3.4-identity-headers
main
Strip spoofed identity headers from inbound requests, inject authenticated identity (sub, roles, azp) after JWT validation. 93.9% test coverage, 13 tests. Closes homelab#9 Co-authored-by: poimen <[email protected]>