fix auth tracking for fast-append flows

[bbalser]

1. catalog/mod.rs:69 — with_auth changed from private to pub(crate)
2. iceberg_table.rs:62-79 — commit_files now wraps the transaction build + commit inside catalog.with_auth(),
   so a 401 triggers token invalidation and a single retry with a fresh transaction