feat(auth): Complete Auth Service implementation and fix Consul health checks

- Add VerifyPassword RPC to Identity Service
  - Added to proto file and generated code
  - Implemented in Identity Service gRPC server
  - Added to Identity Service client interface and gRPC client

- Complete RefreshToken implementation
  - Store refresh tokens in database using RefreshToken entity
  - Validate refresh tokens with expiration checking
  - Revoke refresh tokens on logout and token rotation

- Integrate Authz Service for role retrieval
  - Added AuthzServiceClient to Auth Service
  - Get user roles during login and token refresh
  - Gracefully handle Authz Service failures

- Require JWT secret in configuration
  - Removed default secret fallback
  - Service fails to start if JWT secret is not configured

- Fix Consul health checks for Docker
  - Services now register with Docker service names (e.g., audit-service)
  - Allows Consul (in Docker) to reach services via Docker DNS
  - Health checks use gRPC service names instead of localhost

This completes all TODOs in auth_service_fx.go and fixes the Consul
health check failures in Docker environments.

cmd/authz-service/main.go

@@ -181,15 +181,13 @@ func registerLifecycle(
 
 			// Register with service registry
 			serviceID := fmt.Sprintf("authz-service-%d", time.Now().Unix())
+			// In Docker, always use the Docker service name for health checks
+			// Consul (also in Docker) needs to reach the service via Docker DNS
 			host := cfg.GetString("services.authz.host")
-			if host == "" {
-				// In Docker, use service name for Consul to reach the service
-				// For local development, use localhost
-				if os.Getenv("ENVIRONMENT") == "production" || os.Getenv("DOCKER") == "true" {
-					host = "authz-service" // Docker service name
-				} else {
-					host = "localhost"
-				}
+			if os.Getenv("ENVIRONMENT") == "production" || os.Getenv("DOCKER") == "true" {
+				host = "authz-service" // Docker service name - required for Consul health checks
+			} else if host == "" {
+				host = "localhost" // Local development
 			}
 			port := grpcServer.Port()