Feat: Implement basic web authentication and UI

This commit introduces the foundation for web-based authentication and
user interface. It includes:

- **Session Management**: Securely handling user sessions using
  cryptographically generated tokens, cookies with appropriate security
  flags, and server-side storage.
- **Login/Logout Functionality**: Endpoints for users to log in with
  their credentials and log out, clearing their session.
- **User Interface**: Basic templates for the login page, a list of
  cases, and a detailed view of a single case, allowing users to
  navigate and view their data.
- **Authorization**: An `AuthenticatedWebUser` extractor to ensure only
  logged-in users can access protected web routes.
- **Configuration**: Added a `cookie_secure` option to the configuration
  to control the `Secure` flag on session cookies, useful for local
  development.
- **Dependencies**: Added necessary dependencies for password hashing,
  time handling, and TOML file manipulation.
- **Helper Binary**: Included a `hash-password` binary to simplify
  generating bcrypt hashes for user passwords.

server/src/routes/mod.rs

@@ -1,7 +1,9 @@
 mod debug;
 mod health;
+mod login;
 mod upload;
-mod web;
+pub(crate) mod web;
+mod user_web;
 
 use axum::routing::{get, post};
 use axum::Router;
@@ -13,6 +15,10 @@ pub fn api_router() -> Router<AppState> {
         .route("/api/health", get(health::handle_health))
         .route("/api/debug/whoami", get(debug::handle_whoami))
         .route("/api/upload", post(upload::handle_upload))
+        .route("/web/login", get(login::handle_login_page).post(login::handle_login_submit))
+        .route("/web/logout", post(login::handle_logout))
+        .route("/web/cases", get(user_web::handle_my_cases))
+        .route("/web/cases/{case_id}", get(user_web::handle_case_detail))
         .route("/web/", get(web::handle_case_list))
         .route(
             "/web/audio/{user}/{case_id}/{filename}",