Uvdsl2 - #321

- Convert `SessionWithLegacyEvents` imports to type-only imports to avoid runtime side effects when importing auth-related modules
- Prevent eager initialization of `authSession` via type-only usage in:
  - types.ts
  - SolidAuthnLogic.ts
  - solidLogic.ts
- Add focused tests for fetch bridge behavior in `solidLogicSingleton`:
  - use `window.fetch` when `credentials: omit`
  - fall back to `authFetch` when `session.fetch` is unavailable
- Keep migration compatibility behavior intact while improving import safety and regression coverage

… URL override

Skip WebSession worker initialization for localhost/127.0.0.1 over http and use SessionCore with IndexedDB directly.

This prevents browser SecurityError noise from file:// worker resolution in local dev while keeping normal session behavior in other environments.

- session.ts: OIDC session factory (WebSession/SessionCore, database backends)
- events.ts: SessionEvents class (pure EventEmitter shim, zero side-effects)
- issuer.ts: issuer discovery via /.well-known/openid-configuration
- authSession.ts: login compatibility shim, legacy event wiring, authSession
  assembly; re-exports authSession and SessionWithLegacyEvents type

All existing imports continue working unchanged — authSession.ts is a
drop-in replacement with the same exports.

… tests

info is now a derived getter (from webId/isActive), so tests reset the
session via webId instead of assigning to info.