Parse an Authorization header. Supports:
Bearer <token> → { scheme: 'Bearer', token }Basic <base64> → decode to user:pass and return { scheme: 'Basic', user, pass }For Basic, you may use the global atob.
Invalid format → null.
Sample tests