created mock directory with file

feat(security): use roles claim from JWT in filter (skip DB when present)

feat(security): add roles parse in TokenService

fix(security): return 401 for invalid Bearer tokens #4

fix(security): return 401 for invalid Bearer tokens #3

fix(security): return 401 for invalid Bearer tokens #2

fix(security): return 401 for invalid Bearer tokens via entry point

feat(security): adopt stateless JWT Bearer; add auth filter and 401 entry point

feat(auth): add /api/auth/login endpoint that issues JWT (keeps Basic for now)

test fix

feat(security): add JWT properties and TokenService (sign/verify HS256)

feat(security): add Spring Security, keep /api/health public and secure /api/**

feat: bootstrap project and add /api/health endpoint