feat(auth): integrate authentication with installation lifecycle

compose.yaml

@@ -23,6 +23,8 @@ services:
       THT_WORKSPACE_SECRET_ROOTS: /run/secrets
       THT_SECRETS_FILE: /run/secrets/thothii.secrets
       THT_PI_AUTH_FILE: /home/thoth/.pi/agent/auth.json
+      THT_AUTH_CONFIG_FILE: /run/thothii-auth/auth.yaml
+      THT_AUTH_STATE_ROOT: /data/auth
       THT_DB_NAME: ${THT_DB_NAME:-}
       THT_DWH_REST_URL: ${THT_DWH_REST_URL:-}
       THT_LLM_URL: ${THT_LLM_URL:-}
@@ -40,6 +42,8 @@ services:
       - workspace-registry:/data/workspace-registry
       - workspace-secrets:/data/workspace-secrets
       - sessions:/data/sessions
+      - ${THT_AUTH_CONFIG_ROOT:?set THT_AUTH_CONFIG_ROOT}:/run/thothii-auth:ro
+      - auth-state:/data/auth
     secrets:
       - source: thothii_secrets
         target: thothii.secrets
@@ -204,6 +208,7 @@ volumes:
   sessions:
   qdrant-data:
   embedding-models:
+  auth-state:
 
 secrets:
   thothii_secrets: