Middleware helper: validate request and return user or halt
Extract telegram_id from validated initData params
Validates Telegram Mini App initData using HMAC-SHA256 Returns the parsed params if valid, nil if invalid