Auth and UI Lift-Out: ontoref-daemon consumes ontoref-auth + ontoref-ui; JWKS and Introspect Exposed for SSO

The daemon historically owned its own session store, Argon2id password hashing, Tera template engine init, and cookie/Bearer extraction logic. Lian-build re-implemented the same surface independently.