Refactor auth primitives with typed context-specific checkers

- Add generic, strongly typed query/mutation/action builders and context resolvers
- Introduce per-context permission/capability checkers and shared runtime helpers
- Add runtime module and type tests, and run them via `pnpm run ts`

Author: n-hallberg

package.json

@@ -20,7 +20,7 @@
     "prepare": "tsc",
     "prepublishOnly": "pnpm run build",
     "lint": "eslint src/",
-    "ts": "tsc --noEmit --incremental false",
+    "ts": "tsc --noEmit --incremental false && tsc -p tsconfig.type-tests.json --noEmit",
     "prettier:check": "prettier --check .",
     "prettier:write": "prettier --write .",
     "check-spelling": "cspell '**/*.*' --no-progress",