[Don't merge] spring-26-express downstream

[robsimmons]

Additions:

• An express application defining a simple REST API (split into app.ts that defines the app and server.ts that starts it, which facilitates supertest testing)
• A silly auth service that checks if the password "password" was given
• dev, build, and start NPM commands