feat(content): graphql subgraph with dataloader for textbook/chapter/kp/question

- GraphQLModule: Apollo Federation 2 at /graphql

- Textbook/Chapter/KnowledgePoint/Question @key with @ResolveReference

- RouterAuthGuard: validate Router-Authorization header (ADR-036)

- batchFind methods added to 4 repositories

- Domain modules export repositories for GraphqlModule injection

services/content/src/questions/questions.module.ts

@@ -1,12 +1,13 @@
 import { Module } from "@nestjs/common";
 import { QuestionsController } from "./questions.controller.js";
 import { QuestionsService } from "./questions.service.js";
+import { QuestionsRepository } from "./questions.repository.js";
 import { OutboxModule } from "../shared/outbox/outbox.module.js";
 
 @Module({
   imports: [OutboxModule],
   controllers: [QuestionsController],
-  providers: [QuestionsService],
-  exports: [QuestionsService],
+  providers: [QuestionsService, QuestionsRepository],
+  exports: [QuestionsService, QuestionsRepository],
 })
 export class QuestionsModule {}