refactor: Extract shared helpers in authenticaterequest.py

Move duplicated nested helpers (_compute_org_permissions,
_get_session_token) to module-level functions and extract
_build_verify_token_options and _process_payload so both
sync and async authenticate_request share the same logic.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>