feat(standards): integrate auth-server via pinned spec (docs://spec) + auth recipe and template slice

- serve the pinned auth-server OpenAPI contract as the standards MCP resource docs://spec (no auth-server MCP bundle)
- add Auth Integration recipe (14) and wire it into the registry, prompts, index, and nav
- un-defer Auth Server in the library registry (spec/recipe pointers)
- ship the opt-in template auth slice: interfaces/auth/ (placeholder + mergeable bearerAuth security.yaml) and AUTH_SERVER/JWT_SERVER env
- rebuild bundle (13 modules, 44 components); template stays authless by default

standards/src/templates/app/interfaces/auth/__init__.py

@@ -0,0 +1,9 @@
+"""# Summary
+
+Auth interface: thin FastAPI entry points related to authentication, wired to
+openapi.yaml operationIds by the OpenAPI-first router.
+
+Authentication itself is provided by the shared auth-server service. Wire it by
+declaring a ``bearerAuth`` security scheme in ``openapi.yaml`` (see
+``security.yaml``) and reading the contract at ``docs://spec``.
+"""

standards/src/templates/app/interfaces/auth/security.yaml

@@ -0,0 +1,14 @@
+security:
+  - bearerAuth: []
+components:
+  securitySchemes:
+    bearerAuth:
+      type: http
+      scheme: bearer
+      bearerFormat: JWT
+      x-server-url: "{AUTH_SERVER}"
+      x-introspect-path: "/introspect"
+      x-login-path: "/login"
+      x-register-path: "/register"
+      x-logout-path: "/logout"
+      x-me-path: "/me"