SCIM authentication plug supporting Bearer tokens and Basic Auth.
Extracts credentials from the Authorization header, delegates validation
to the configured ExScim.Auth.AuthProvider, and on success sets
:scim_scope on the connection assigns. Halts with a 401 on failure.