Remove auth dependency

[kleberbaum]

Summary

• drop auth usage to avoid crypto.createSign
• patch pylon to avoid crypto.createSign

Testing

• npm run build (fails: Cannot find type definition file for 'bun-types')
• npm test (fails: vitest not found)

Codex couldn't run certain commands due to environment limitations. Consider configuring a setup script or internet access in your Codex environment to install dependencies.

---

https://chatgpt.com/codex/tasks/task_e_6860245c2490832d86639962e35b1ba3

[Copilot]

Pull Request Overview

This PR removes the dependency on Node’s crypto.createSign by patching the @getcronit/pylon library to use WebCrypto, and ensures the patch is applied automatically by adding patch-package in package.json.

• Replace synchronous Node crypto signing in auth.js with WebCrypto-based async signing.
• Add a postinstall script and include patch-package in dependencies for automatic patching.

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
patches/@getcronit+pylon+2.0.0.patch	Switches from crypto.createSign to WebCrypto crypto.subtle.
package.json	Adds "postinstall": "patch-package" and the patch-package dependency.

Comments suppressed due to low confidence (2)

patches/@getcronit+pylon+2.0.0.patch:17

• [nitpick] New async signing logic isn’t covered by existing tests. Please add unit tests to verify WebCrypto-based signatures produce the expected base64 output.

+  const signature = await crypto.subtle.sign(

patches/@getcronit+pylon+2.0.0.patch:10

• The function now uses await, so its enclosing function must be declared async. Please add async to the function signature to avoid syntax errors.

+  const key = await crypto.subtle.importKey(