Release 2.0.0

X-Internal-Key is gone from the shared package (plan T2: every internal call in the estate uses a service token). Breaking, and nothing in the estate used any of it:

• internalApiAuth (the middleware export and the index re-export) is removed.
• OpenVibeAuthClient#verifyTokenInternal (Network's /internal/verify-token, deleted) and #getUserProfile (a route Network never had) are removed; the rest of the client is unchanged.
• The deprecated openvibe-shared/chrome-ssr alias is removed: use openvibe-shared/frame.