update to fully disable auth

[cholmes]

Hey, not sure if this is the right approach, it's just what cursor gave to me. But if I just set the config.yaml file to 'auth_disabled: true' then it still was requiring auth. The readme said you can disable authentication by editing the app/core/auth.py, but I wasn't sure what to do to disable there. So perhaps this just could be a readme fix to explain how to disable the authentication there. But this seemed to work, and uses the config yaml file to disable it.

[Copilot]

Pull Request Overview

This PR updates the authentication mechanism to allow for disabling auth via the config.yaml file. The changes include:

• Modifying the security scheme initialization to conditionally disable auto error handling based on configuration.
• Adjusting the verify_auth dependency to manually raise an error when credentials are absent and auth is enabled.

[Copilot]

Initializing the HTTPBearer instance at module import using get_settings() may capture stale configuration if the settings are updated at runtime. Consider instantiating HTTPBearer within a dependency function or another runtime context to ensure it uses the latest configuration.

Suggested change

	security = HTTPBearer(auto_error=not get_settings().auth_disabled)
	def get_security() -> HTTPBearer:
	"""
	Dynamically create an HTTPBearer instance based on the current configuration.
	"""
	return HTTPBearer(auto_error=not get_settings().auth_disabled)