feat(standards): integrate auth-server via pinned spec (docs://spec) + auth recipe and template slice

- serve the pinned auth-server OpenAPI contract as the standards MCP resource docs://spec (no auth-server MCP bundle)
- add Auth Integration recipe (14) and wire it into the registry, prompts, index, and nav
- un-defer Auth Server in the library registry (spec/recipe pointers)
- ship the opt-in template auth slice: interfaces/auth/ (placeholder + mergeable bearerAuth security.yaml) and AUTH_SERVER/JWT_SERVER env
- rebuild bundle (13 modules, 44 components); template stays authless by default

standards/src/mkdocs.lib.yml

@@ -64,4 +64,5 @@ nav:
   - Human-in-the-Loop: 08_human_in_loop.md
   - Infra Adapters: 09_infra_adaptors.md
   - Genericity Matrix: 12_genericity_matrix.md
+  - Auth Integration: 14_auth_integration.md
   - Library Registry: 13_library_registry.md