feat: Implement magic link authentication

This commit introduces a new magic link authentication flow.
The desktop client can now request a temporary, one-time-use token from
the server.
This token is then used to open a URL in the system browser, which
redirects to the server.
The server consumes the token, installs a regular web session, and
redirects the user

server/src/routes/mod.rs

@@ -3,6 +3,7 @@ mod case_actions;
 mod debug;
 mod health;
 mod login;
+mod magic;
 mod oneliners;
 mod upload;
 pub(crate) mod user_web;
@@ -19,6 +20,8 @@ pub fn api_router() -> Router<AppState> {
         .route("/api/debug/whoami", get(debug::handle_whoami))
         .route("/api/upload", post(upload::handle_upload))
         .route("/api/oneliners", get(oneliners::handle_oneliners))
+        .route("/api/auth/magic-link", post(magic::handle_create))
+        .route("/web/magic", get(magic::handle_consume))
         .route(
             "/web/login",
             get(login::handle_login_page).post(login::handle_login_submit),