feat: phase 1 — InsForge session auth, role gates, refresh middleware, auth test suites

bootstrap/app.php

@@ -1,5 +1,6 @@
 <?php
 
+use App\Http\Middleware\RefreshInsForgeToken;
 use Illuminate\Foundation\Application;
 use Illuminate\Foundation\Configuration\Exceptions;
 use Illuminate\Foundation\Configuration\Middleware;
@@ -11,7 +12,9 @@ return Application::configure(basePath: dirname(__DIR__))
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware) {
-        //
+        $middleware->alias([
+            'insforge.refresh' => RefreshInsForgeToken::class,
+        ]);
     })
     ->withExceptions(function (Exceptions $exceptions) {
         //