Summary
- Adds auth/password.rs — hash_password + verify_password (Functional Core)
- Adds auth/rate_limit.rs — sliding-window rate limiter + constants (Functional Core)
- Adds db/accounts.rs — AccountRow + resolve_identifier DB queries (Imperative Shell)
- Removes duplicate local definitions from create_session.rs and create_did.rs
- Fixes the route-imports-route smell: oauth_authorize.rs now imports from auth:: and db:: directly
Test plan
- cargo clippy --package relay -- -D warnings passes clean
- cargo test --package relay — 368 tests, 0 failures