Bryan Helmkamp 6d869aa8da Add asymmetric JWT service-to-service auth between arc-web and arc-attractor ... Ed25519 asymmetric JWT: arc-web signs with private key, arc-attractor verifies with public key. Adds AuthenticatedService axum extractor to all routes, jose dependency for TypeScript signing, and key generation script. Startup behavior: ARC_JWT_PUBLIC_KEY set → enforce JWT auth; not set + ARC_INSECURE_DISABLE_AUTHENTICATION=true → allow unauthenticated; neither → refuse to start with clear error. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-02-28 18:05:49 -05:00
..
generate-jwt-keys.sh	Add asymmetric JWT service-to-service auth between arc-web and arc-attractor	2026-02-28 18:05:49 -05:00