Auth fetch verification (cavage) works now

- Verifying inbound requests signed with Cavage are now checked as
  expected
- Fixed a bug where the signature header is not generated correctly
- Extended config to include settings for what requests to verify
- Fixed new server in main not using internal port from config

temp.toml

@@ -1,7 +1,8 @@
+# .
 [general]
   protocol = "https"
   domain = "serveo.net"
-  subdomain = "38e5543b0fc97680472709952a04622f"
+  subdomain = "5dc9c90be02fecb3b132ad4d4877555a"
   private_port = 8080
   public_port = 443
 
@@ -13,6 +14,8 @@
   first_time_setup_otp = "Example otp password"
   profiling_password = ""
   allow_registration = true
+  auth_fetch_for_get = false
+  auth_fetch_for_non_get = true
 
 [webauthn]
   display_name = "Linstrom"
@@ -49,3 +52,4 @@
 
 [experimental]
   use_ed25519_keys = false
+  auth_fetch_for_server_actor = false