feat: Add auth header conditionally

darkfeed/src/main/kotlin/api/AuthManager.kt

···
     val authAccountDid
         get() = authAccount.username
 
+    /** The PDS host of the account used for authentication. */
+    val authAccountPdsHost
+        get() = authAccount.pdsHost
 
     /** Create a new auth session. */
     suspend fun createSession() {

darkfeed/src/main/kotlin/api/AuthPlugin.kt

···
     val authMutex = Mutex()
     val log = LoggerFactory.getLogger(LOGGER_NAME)
 
+    fun isAuthRequired(url: Url): Boolean {
+        val ownerPdsUrl = Url(authManager.authAccountPdsHost)
+
+        return when (url.host) {
+            ownerPdsUrl.host -> when {
+                url.segments.containsAll(listOf("xrpc", "com.atproto.repo.putRecord")) -> true
+                else -> false
+            }
+
+            else -> false
+        }
+    }
+
     // Add authorization header to requests.
     onRequest { request, _ ->
         // Format the request's endpoint as '<protocol>://<host>/<path>' for use in logs.
-        val endpoint = with(request.url) { "${protocol.name}://${host}${encodedPath}" }
+        val endpoint = with(request.url) { "${protocol.name}://${host}/${encodedPath}" }
+
+        // Check if authorization is required.
+        if (!isAuthRequired(request.url.build())) {
+            log.debug("Not adding 'Authorization' header on request to '{}'", endpoint)
+            return@onRequest
+        }
 
         // Remove any existing `Authorization` headers.
         if (request.headers.contains(HttpHeaders.Authorization)) {
···
     // Check responses for authorization failures.
     on(Send) { request ->
         // Format the request's endpoint as '<protocol>://<host>/<path>' for use in logs.
-        val endpoint = with(request.url) { "${protocol.name}://${host}${encodedPath}" }
+        val endpoint = with(request.url) { "${protocol.name}://${host}/${encodedPath}" }
 
         // Send the request.
         val originalCall = proceed(request)