Build, test, and debug regular expressions
Matches any string/path that does NOT start with /api/auth/, does NOT start with /assets/ or /public/, and does NOT end with a favicon, icon, or apple-icon image file (ico, jpg, jpeg, png, svg). It uses a 'tempered dot' negative lookahead construct ((?!...).)* to fail the match if any excluded pattern appears. This is a common pattern in Next.js middleware config matchers to run middleware on all routes while skipping NextAuth API endpoints and static assets.