Stamp 2.58.0 native JWT middleware and useAuthApi.

Same skip paths, Bearer/query token, Clerk RS256 leftover, and local HS256
contract. routers/auth.py, user records, and AUTH_JWT_SECRET are untouched.

tests/test_periscope_leftover_package_requirements.py

@@ -17,7 +17,7 @@ DOCKERIGNORE = ROOT / ".dockerignore"
 def test_package_json_is_periscope_web():
     text = PKG.read_text(encoding="utf-8")
     assert '"name": "periscope-web"' in text
-    assert '"version": "2.57.0"' in text
+    assert '"version": "2.58.0"' in text
     assert "Native Periscope overlay" not in text[:400]
     assert LOCK.is_file()
     lock = LOCK.read_text(encoding="utf-8")