Release v22.18.0

Added

• HttpRequestContextEndpointExtensions on Cratis.Arc.Http: SetEndpointMetadata, GetEndpointMetadata, and AllowsAnonymous() on IHttpRequestContext, so an IAuthenticationHandler can tell whether the endpoint it is about to authenticate allows anonymous access (#2706)

Fixed

• AuthenticationMiddleware now sets the matched endpoint's metadata on the request context before any IAuthenticationHandler runs, so a handler can check context.AllowsAnonymous() and return AuthenticationResult.Anonymous instead of rejecting - and logging a rejection for - a request the endpoint never required a credential for, such as a Kubernetes health probe (#2706)