Add identity and target authorization package

OIDC validation, principal mapping, remora:v1 roles, and current-authz
filtering with kind acceptance on Keycloak and ZITADEL.

crates/remora-identity/Cargo.toml

@@ -0,0 +1,29 @@
+[package]
+name = "remora-identity"
+edition.workspace = true
+publish = false
+rust-version.workspace = true
+version.workspace = true
+
+[dependencies]
+base64.workspace = true
+jsonwebtoken = { version = "9.3.1", default-features = false, features = ["use_pem"] }
+remora-domain.workspace = true
+remora-durable.workspace = true
+reqwest = { version = "0.12.28", default-features = false, features = [
+    "json",
+    "rustls-tls-webpki-roots",
+] }
+serde = { workspace = true, features = ["derive"] }
+serde_json.workspace = true
+sha2.workspace = true
+sqlx.workspace = true
+thiserror.workspace = true
+time.workspace = true
+tokio.workspace = true
+
+[dev-dependencies]
+pkcs8 = { version = "0.10.2", features = ["pem"] }
+rand = "0.8.5"
+rsa = { version = "0.9.8", default-features = false, features = ["std", "pem"] }
+tokio = { workspace = true, features = ["macros", "rt-multi-thread", "sync", "time"] }