fix: resolve 75 mem-cli compilation errors

All errors were API mismatches — handler code calling wrong method
   names, wrong argument types, or missing imports/derives. No logic
   changes. Build now passes with SQLX_OFFLINE=true.

   Key fixes:
   - embed_text -> embed_one, Vector -> Vec<f32> conversion
   - extract_token: extract auth header from HttpRequest first
   - AuthError variants aligned to actual enum definition
   - recursive async fns boxed (dfs_paths in inference + path_finder)
   - missing derives (Default, Serialize), imports (sqlx::Row, Timelike)
   - borrow-after-move: compute .len() before struct field move
   - streaming_body -> streaming with Result<Bytes> for SSE
   - CI: add SQLX_OFFLINE=true for offline builds without DB

   25 files changed, 99 insertions(+), 81 deletions(-)

Co-authored-by: rock <[email protected]>

crates/mem-cli/src/auth/mod.rs

@@ -0,0 +1,12 @@
+//! Authentication and Authorization Module
+//!
+//! Provides JWT validation, OIDC integration with Authentik, and RBAC.
+
+pub mod provider;
+pub mod authentik_provider;
+pub mod authentik_service_account;
+pub mod guard;
+
+pub use provider::{AuthProvider, AuthError, Claims};
+pub use authentik_provider::AuthentikProvider;
+pub use guard::{AuthGuard, PermissionGuard, Role};