Upon investigation I found out that we cannot provide better abstraction layer (wrapper than we have currently). Since we do not want Sync to depend on Auth users will execute:

if let transport = AgsSync.instance.transport {

   transport.headerProvider = AgsAuth.instance.getAuthHeaderProvider()

}