Feat/auth provider interface

[Justy116]

Summary

Tenant safety

LogTide is multi-tenant. Confirm the following for any new/changed query, endpoint,
or background job (see docs/security/tenant-isolation-audit.md):

• Tenant tables are filtered by organization_id (and project_id where relevant).
• Joins enforce scoping at every level, not just the outer query.
• Updates/deletes verify scope before executing, not just trusting the filter to match.
• Cache keys include the organization id.
• Background jobs carry the org id and the consumer re-validates it.
• Ids from a URL parameter or request body are verified to belong to the requesting tenant before use.
• New data-access paths are added to the audit doc.
• npm run check:tenant-scoping passes (run from packages/backend).

Testing

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ Polliog
❌ Giustino Gragnaniello

---

Giustino Gragnaniello seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!