Implement RawFramingSession with tokio::io::split for read/write halves, BufReader/BufWriter for buffered I/O, and decode_with_remainder for partial frame reassembly. Add first-frame authentication via IdentityProvider::resolve_from_token(). Add RawFramingConfig.auth field for IdentityProvider reference. Update SshInterface test for new RawFramingConfig shape.