Anima Internal Auth

Single sign-on for every internal Anima app.

Use the same Cognito user pool and a shared cookie domain to move between apps without re-authenticating. Local development works onlocalhost:3000, production apps live on *.internal.animahealth.com.