fix(auth): replace passlib with direct bcrypt to fix Python 3.10 compat

fix(auth): add missing get_optional_user dependency

feat(auth): add JWT authentication system with bcrypt + API key support