Explicit BloomAuthBase session manager override. If null, resolved via global DI.
final BloomAuthBase? auth;