feat: add external authorization service (authzd) with JWT authentication

- Add new authzd gRPC service implementing Envoy's external authorization API
- Integrate JWT authentication filter in Envoy configuration with claim extraction
- Update middleware to support both cookie-based and header-based user authentication
- Add comprehensive test coverage for authorization service and server
- Configure proper service orchestration with authzd, sparkled, and Envoy
- Update build system and Docker configuration for multi-service deployment
- Add grpcurl tool for gRPC service debugging and testing

This enables fine-grained authorization control through Envoy's ext_authz filter
while maintaining backward compatibility with existing cookie-based authentication.

1 files changed, 1 insertions, 2 deletions

diff --git a/bin/entrypoint.sh b/bin/entrypoint.sh
index 28d6c5f..eb7dc07 100755
--- a/bin/entrypoint.sh
+++ b/bin/entrypoint.sh
@@ -5,5 +5,4 @@ set -e
 [ -n "$DEBUG" ] && set -x
 
 cd "$(dirname "$0")/.."
-echo "[$(date "+%H:%M:%S")] ==> Starting…"
-./bin/envoy.sh & ./bin/sparkled
+./bin/envoy.sh & ./bin/authzd & ./bin/sparkled