fix(httpauth-firebase)!: rename package httpauthfirebase, bump httpauth and rbac to v1.0.0

Rename package from httpauth to httpauthfirebase to follow ecosystem convention
(repo name = package name, hyphens removed). Bump httpauth dependency from
v0.1.0 to v1.0.0 and rbac indirect dependency from v0.9.0 to v1.0.0.

BREAKING CHANGE: import path unchanged (code.nochebuena.dev/go/httpauth-firebase)
but package identifier changes from httpauth to httpauthfirebase — remove any
import alias previously used to disambiguate from code.nochebuena.dev/go/httpauth.

CHANGELOG.md

@@ -5,6 +5,24 @@ All notable changes to this module will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this module adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.0] - 2026-05-08
+
+### Changed
+
+- Package renamed from `httpauth` to `httpauthfirebase` — follows ecosystem convention
+  (`repo name = package name`, hyphens removed); import path is unchanged
+  (`code.nochebuena.dev/go/httpauth-firebase`); remove any alias previously used to
+  disambiguate from `code.nochebuena.dev/go/httpauth`
+- `EnrichmentMiddleware`, `AuthzMiddleware`, `IdentityEnricher`, `PermissionProvider`,
+  `WithTenantHeader`, and `EnrichOpt` removed; they now live in
+  `code.nochebuena.dev/go/httpauth` (provider-agnostic middleware layer)
+- `AuthMiddleware` updated to call `httpauth.SetTokenData` — fulfills the integration
+  contract between provider-specific auth and generic middleware
+- Dependency `code.nochebuena.dev/go/httpauth` bumped to v1.0.0
+- Dependency `code.nochebuena.dev/go/rbac` bumped to v1.0.0 (indirect)
+
+[1.0.0]: https://code.nochebuena.dev/go/httpauth-firebase/releases/tag/v1.0.0
+
 ## [0.9.0] - 2026-03-18
 
 ### Added