Add HandleGetModules returning module state, metadata, and public config (auth providers, Create URI scheme). No auth required — clients call this pre-login. Register at /api/modules before the auth middleware. Ref #97