chore(passport): Implement Custom domain support

[betimshahini]

Implement authentication against configured custom domains

Leverage custom domain details for app from Starbase. Mock data, if needed, based on public app data endpoint schema, assuming it contains custom domain info.

• The session server strategies inside passport need to take custom domain parameters to secure sessions
• Cookie strategy to be adjusted to localize the session only to the rollup infra (restrict to registered subdomains)
• .well-known endpoints need to reflect the custom domain in all URLs
• ID, access and refresh tokens (but not the authentication tokens) should have the issuer be the custom domain.
• CSP policies

[szkl]

The first item is implemented in #2330. The rest looks like already done.