perf: findings 6.1, 6.2, 2.6 — async Argon2, moka cache, full streaming migration

- 6.1: PasswordHasherPort now async_trait with spawn_blocking for Argon2
- 6.2: OIDC pending maps migrated from std::sync::Mutex to moka::sync::Cache with TTL
- 2.6: All file download paths migrated to 64KB streaming (get_file_stream / read_blob_stream)
  - WOPI, dedup, batch ZIP, file_retrieval_service consumers migrated
  - WebDAV COPY uses zero-copy dedup (copy_file)
  - Removed dead code: get_file_content, get_file_mmap, read_blob, read_blob_bytes
    from traits, impls, stubs, and mocks (18 files touched)

src/application/services/share_service.rs

@@ -348,7 +348,7 @@ impl ShareUseCase for ShareService {
 
         // Verify the password using the infrastructure port
         match share.password_hash() {
-            Some(hash) => self.password_hasher.verify_password(password, hash),
+            Some(hash) => self.password_hasher.verify_password(password, hash).await,
             None => Ok(true), // No password required
         }
     }
@@ -395,12 +395,13 @@ mod tests {
 
     struct MockPasswordHasher;
 
+    #[async_trait]
     impl PasswordHasherPort for MockPasswordHasher {
-        fn hash_password(&self, password: &str) -> Result<String, DomainError> {
+        async fn hash_password(&self, password: &str) -> Result<String, DomainError> {
             Ok(format!("hashed_{}", password))
         }
 
-        fn verify_password(&self, _password: &str, _hash: &str) -> Result<bool, DomainError> {
+        async fn verify_password(&self, _password: &str, _hash: &str) -> Result<bool, DomainError> {
             Ok(true)
         }
     }
@@ -439,10 +440,6 @@ mod tests {
             unimplemented!()
         }
 
-        async fn get_file_content(&self, _id: &str) -> Result<Vec<u8>, DomainError> {
-            unimplemented!()
-        }
-
         async fn get_file_stream(
             &self,
             _id: &str,
@@ -465,10 +462,6 @@ mod tests {
             unimplemented!()
         }
 
-        async fn get_file_mmap(&self, _id: &str) -> Result<bytes::Bytes, DomainError> {
-            unimplemented!()
-        }
-
         async fn get_file_path(
             &self,
             _id: &str,