fix: resolve file management operations not working (#83)

- Fix rename: context menu was nullifying target reference before rename dialog could use it
- Fix delete files/folders: auth extractors were mandatory, causing 401 when auth not configured
- Fix view-file: async fetch race condition with context menu cleanup
- Fix orphaned ID mappings on file deletion
- Fix Authorization: Bearer null headers sent without token
- Add OptionalUserId and OptionalAuthUser infallible extractors

src/interfaces/middleware/auth.rs

@@ -1,4 +1,5 @@
 use std::sync::Arc;
+use std::convert::Infallible;
 use axum::{
     extract::{State, Request, FromRequestParts},
     http::{StatusCode, HeaderMap, header, request::Parts},
@@ -63,6 +64,45 @@ where
     }
 }
 
+/// Optional user ID extractor – never fails.
+/// Yields `Some(id)` when auth middleware ran, `None` otherwise.
+#[derive(Clone, Debug)]
+pub struct OptionalUserId(pub Option<String>);
+
+impl<S> FromRequestParts<S> for OptionalUserId
+where
+    S: Send + Sync,
+{
+    type Rejection = Infallible;
+
+    async fn from_request_parts(parts: &mut Parts, _state: &S) -> Result<Self, Self::Rejection> {
+        Ok(OptionalUserId(
+            parts.extensions.get::<CurrentUser>().map(|cu| cu.id.clone()),
+        ))
+    }
+}
+
+/// Optional auth user extractor – never fails.
+/// Yields `Some(AuthUser)` when auth middleware ran, `None` otherwise.
+#[derive(Clone, Debug)]
+pub struct OptionalAuthUser(pub Option<AuthUser>);
+
+impl<S> FromRequestParts<S> for OptionalAuthUser
+where
+    S: Send + Sync,
+{
+    type Rejection = Infallible;
+
+    async fn from_request_parts(parts: &mut Parts, _state: &S) -> Result<Self, Self::Rejection> {
+        Ok(OptionalAuthUser(
+            parts.extensions.get::<CurrentUser>().map(|cu| AuthUser {
+                id: cu.id.clone(),
+                username: cu.username.clone(),
+            }),
+        ))
+    }
+}
+
 // Error for authentication operations
 #[derive(Debug, thiserror::Error)]
 pub enum AuthError {