Feat add iam auth

apps/api/src/modules/sessions/admin-session.module.ts

@@ -0,0 +1,19 @@
+import { Global, Module } from '@nestjs/common';
+import { PrismaModule } from '../../prisma/prisma.module';
+import { AdminSessionService } from './admin-session.service';
+import { AppSessionService } from './app-session.service';
+
+/**
+ * Revocable admin sessions.
+ *
+ * Global so every login path (admin panel and app) and the IAM
+ * back-channel-logout endpoint can use these without wiring imports. Both
+ * services are inert while tracking is off (see AdminSessionService).
+ */
+@Global()
+@Module({
+  imports: [PrismaModule],
+  providers: [AdminSessionService, AppSessionService],
+  exports: [AdminSessionService, AppSessionService],
+})
+export class AdminSessionModule {}