v0.16.0 beta

Changelog:

• validate auth tokens exactly once, upon receipt
• reject unauthorized requests without reading payload data (headers only)
• remove unnecessary lock acquisitions when instantiating a new request handler
• move per-transaction garbage collection completely into a background task
• separate a new tinychain_async package out of the tinychain Python client
• move client implementations into a single client directory