Normalize salt bearer tokens

[aiirvizionz]

Summary

• normalize auth/salt Bearer headers with case-insensitive scheme handling and whitespace trimming
• ignore empty Bearer headers so cookie auth can still be used
• add focused salt auth tests for flexible Bearer parsing and empty-header fallback

Tests

• vitest run src/app/api/auth/salt/route.test.js
• node --check src/app/api/auth/salt/route.js
• node --check src/app/api/auth/salt/route.test.js
• git diff --check