auth-fixes
main
- app.py: add _resolve_env and _resolve_spec_env_vars to replace {ENV_VAR} patterns (e.g. {AUTH_SERVER}) with os.environ values so the frontend receives resolved URLs via /openapi.json
- security.py: read x-server-url and x-introspect-path separately from resolved security scheme, join to form introspect URL
- security.py: parse securitySchemes, resolve {ENV_VAR} from env, generate FastAPI Depends for Bearer JWT introspection - app.py: extract schemes, build deps, pass to binder at init - binder.py: inject Depends() per operation based on spec's security - __init__.py: export security module - pyproject.toml: add httpx dependency