SVS: Add auth to forward endpoint

[shadmau]

Overview

We currently only protect /api/forward by IP rate limiting and a simple paymaster address check. We should harden the endpoint by issuing and integrating a short-lived JWT from the /sponsor flow.

To-Do:

TBD