feat: implement Redis session memory and multi-turn conversational RAG with coreference resolution

feat: implement JWT authentication with role-based access

feat: add auth guardrails and request observability