LabMode Auth Worker — endpoints: /login, /callback, /me, /logout (GET/POST), /.well-known/jwks.json