Check authentication status
Public endpoint that returns authentication status.
**Safety:**
- Returns 200 OK with authenticated flag in body
- Avoids browser error logging when checking unauthenticated status
- No information leakage about auth methods or session details
Response
Authentication status
authenticated
Whether the request is authenticated
user
Username from JWT sub claim (null if not authenticated)

