Local authentication during verification

Treat authentication as an on-demand branch of the verification being performed.

1. Attempt the exact UI or API operation that needs verification.
2. If it succeeds anonymously, continue without creating authentication state.
3. If it fails on authentication, create one short-lived owner session directly in the local PostgreSQL sessions table.
4. Reuse that session for the original operation, collect the required evidence, and delete the session immediately afterward.

Create the temporary session

Use the repository's configured local PG_URL; do not assume a container name or hard-code database credentials. Generate a unique session ID and a high-entropy token without a . character. Insert a session that expires in at most 15 minutes: