feat(standards): integrate auth-server via pinned spec (docs://spec) + auth recipe and template slice

- serve the pinned auth-server OpenAPI contract as the standards MCP resource docs://spec (no auth-server MCP bundle)
- add Auth Integration recipe (14) and wire it into the registry, prompts, index, and nav
- un-defer Auth Server in the library registry (spec/recipe pointers)
- ship the opt-in template auth slice: interfaces/auth/ (placeholder + mergeable bearerAuth security.yaml) and AUTH_SERVER/JWT_SERVER env
- rebuild bundle (13 modules, 44 components); template stays authless by default

standards/mcp/libraries.json

@@ -68,12 +68,13 @@
     },
     {
       "name": "Auth Server",
-      "import": "auth-server",
-      "purpose": "Central identity service (register/login/me/introspect).",
+      "import": null,
+      "purpose": "Central identity service (register/login/me/logout/introspect).",
       "use_instead_of": "building authentication endpoints yourself",
-      "capabilities": ["auth", "identity", "service", "register", "login", "introspect"],
-      "status": "deferred",
-      "mcp": { "server": null, "port": null, "note": "service; no MCP bundle; deferred" }
+      "capabilities": ["auth", "identity", "service", "register", "login", "logout", "introspect", "bearer"],
+      "spec": "docs://spec",
+      "recipe": "docs://modules/auth_integration",
+      "mcp": { "server": null, "port": null, "note": "service; read contract via docs://spec; no MCP bundle" }
     }
   ]
 }