feat: WIP Support Authentication in Realtime Subscriptions

[dthyresson]

• can use @requireAuth to ensure an authenticated user can subscribe
  TODO:

• docs

• show example of authorization

const newMessage = {
  newMessage: {
    subscribe: (
      _,
      { roomId },
      {
        pubSub,
        currentUser,
      }: { pubSub: NewMessageChannelType; currentUser: Record<string, any> }
    ) => {
      if (currentUser || currentUser.id != '1234') {
        throw new ForbiddenError('no can do')
      }

HMM. I renamed a branch and this included files from #8791. I may redo this PR.

[dthyresson]

Closing in favor of #8815