MoqListenerAuth

MoQ auth on a listener. Off (the default) is exactly the behaviour without it: no token needed, none checked. Required: a session must present a valid token (WebTransport CONNECT ?jwt=, the PATH option’s ?jwt= on QUIC, or the SETUP AUTHORIZATION TOKEN option) signed by a trusted key, and every publish / subscribe / fetch / namespace subscription is checked against its put / get grants.