Add TokenAuthMiddleware to emit AUTH_SUCCESS/AUTH_FAILURE with spec-aligned audit details and wire it through the DI container using server.token resolution.

Add Behave and Robot coverage for auth event emission and end-to-end audit persistence, and update audit subscriber producer notes and changelog.

ISSUES CLOSED: #714

@@ -0,0 +20,4 @@
+from cleveragents.infrastructure.events.types import EventType
+
+
+class RecordingEventBus:

@@ -0,0 +46,4 @@
+    return AuditService(settings=settings, session=session)
+
+
+@given('an auth middleware with expected token "{token}"')

@@ -0,0 +20,4 @@
+from cleveragents.infrastructure.events.types import EventType
+
+
+class RecordingEventBus:

@@ -0,0 +46,4 @@
+    return AuditService(settings=settings, session=session)
+
+
+@given('an auth middleware with expected token "{token}"')

@@ -0,0 +20,4 @@
+from cleveragents.infrastructure.events.types import EventType
+
+
+class RecordingEventBus:

@@ -0,0 +48,4 @@
+
+@given('an auth middleware with expected token "{token}"')
+def step_auth_middleware_with_token(context, token: str) -> None:
+    context.expected_token = token

@@ -0,0 +20,4 @@
+from cleveragents.infrastructure.events.types import EventType
+
+
+class RecordingEventBus:

@@ -0,0 +48,4 @@
+
+@given('an auth middleware with expected token "{token}"')
+def step_auth_middleware_with_token(context, token: str) -> None:
+    context.expected_token = token

@@ -0,0 +20,4 @@
+from cleveragents.infrastructure.events.types import EventType
+
+
+class RecordingEventBus:

@@ -0,0 +47,4 @@
+
+
+@given('an auth middleware with expected token "{token}"')
+def step_auth_middleware_with_token(context, token: str) -> None:

@@ -0,0 +154,4 @@
+    ) -> None:
+        """Emit AUTH_FAILURE if an event bus is configured."""
+        if self._event_bus is None:
+            return

@@ -0,0 +20,4 @@
+from cleveragents.infrastructure.events.types import EventType
+
+
+class RecordingEventBus:

@@ -0,0 +46,4 @@
+    return AuditService(settings=settings, session=session)
+
+
+@given('an auth middleware with expected token "{token}"')

@@ -0,0 +20,4 @@
+from cleveragents.infrastructure.events.types import EventType
+
+
+class RecordingEventBus:

@@ -0,0 +49,4 @@
+@given('an auth middleware with expected token "{token}"')
+def step_auth_middleware_with_token(context, token: str) -> None:
+    context.expected_token = token
+

@@ -330,0 +337,4 @@
+        resolved = svc.resolve("server.token")
+        raw = resolved.value
+        if raw is None:
+            return None

@@ -0,0 +140,4 @@
+            "user_identity": user_identity or "unknown",
+            "token_prefix": token_prefix,
+        }
+        if ip_address is not None: