Lets the Dex session layer (lane B) and page handlers (lane C) build independently: handlers depend only on web.Auth; oidc.DexAuth (B) and StubAuth (dev) implement it. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
