feat: AUTH_MODE configuration, anonymous suggestions, and seed script

[JohnRDOrazio]

Summary

Support configurable auth modes and anonymous contribution workflows.

Requirements

AUTH_MODE

• AUTH_MODE=required|optional|disabled in config + auth module
• ANONYMOUS_USER returned in disabled mode

Anonymous Suggestions

• HMAC-signed tokens with 24h TTL
• 5 endpoints: create, save, submit, discard, beacon
• Rate limiting: 5 sessions per IP per hour
• Honeypot validation for bot protection
• suggestion_sessions model extensions

Seed Script

• scripts/seed-project.py for importing OWL files with direct PostgreSQL indexing
• Supports URL/file import, upstream sync config, index-only rebuild

Index Fix

• Include skos:altLabel, skos:prefLabel as annotations in class detail