fix(security): AutoLoginAuthenticationHandler no-op sign-in/out (avoid 500 on /auth/logout when flag on)

src/Server/ZB.MOM.WW.OtOpcUa.Security/Auth/AutoLoginAuthenticationHandler.cs

@@ -15,7 +15,7 @@ namespace ZB.MOM.WW.OtOpcUa.Security.Auth;
 ///     The minted principal mirrors the shape the real login (AuthEndpoints) produces.
 /// </summary>
 public sealed class AutoLoginAuthenticationHandler
-    : AuthenticationHandler<AuthenticationSchemeOptions>
+    : AuthenticationHandler<AuthenticationSchemeOptions>, IAuthenticationSignInHandler
 {
     private readonly AuthDisableLoginOptions _opts;
 
@@ -32,6 +32,12 @@ public sealed class AutoLoginAuthenticationHandler
         : base(options, logger, encoder)
         => _opts = disableLoginOptions.Value;
 
+    /// <summary>No-op: auto-login writes no cookie, so an explicit sign-in has nothing to persist.</summary>
+    public Task SignInAsync(ClaimsPrincipal user, AuthenticationProperties? properties) => Task.CompletedTask;
+
+    /// <summary>No-op: there is no auth cookie to clear; the next request re-authenticates via this handler.</summary>
+    public Task SignOutAsync(AuthenticationProperties? properties) => Task.CompletedTask;
+
     /// <inheritdoc />
     protected override Task<AuthenticateResult> HandleAuthenticateAsync()
     {