6.0.0-RC7

test(session): drop dead $_SESSION speculative tests
refactor(jwt): delete duplicate JWT classes and their tests
test(jwt): point AuthenticationService tests at Core JwtService
refactor(jwt): wire AuthenticationService against Core JwtService
refactor(login): drop globals from LoginService
feat(session): add /api/v1/session/whoami modern PSR-15 demo route