Merge pull request #117 from loresoft/dependabot/nuget/microsoftexten…

…sions-75dc771e4e

Bump the microsoftextensions group with 4 updates

Remove event assertion from DiagnosticsTests

Remove endpoint request metric

Remove obsolete DI extensions and tests

Add httpYac sample with HMAC auth config

fix tests

Merge pull request #98 from loresoft/claude/security-review-hash-auth…

…-cwPAK

Harden HMAC authentication against timing and validation bypasses

Make request limit provider async and scoped

Support keyed IHmacKeyProvider per scheme

Update RateLimitedApplicationFactory.cs