Add optional authentication

[halabooda]

Implement the ability to secure API methods with authentication using a JWT token.

If this option is enabled, a secret key must be provided to decrypt the tokens—this is necessary so that another system can use this key to sign tokens. For example, this is how Supabase handles it like that:

Additionally, allow control over which resources are protected. Initially, there should be two types:

• Run code
• Internal API (template/action management)