fix: wrap authPlugin with fastify-plugin to expose decorator to child contexts

The authenticate decorator was encapsulated and invisible to route handlers
registered in child scopes, causing "request.server.authenticate is not a function".

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>