git:20260724.87ce252 to git:20260813.364913f

3 added, 1 removed. Audit A to A.

# Auth Package

AuthContext and scopes for Flowbot call paths.

## Subjects

`pkg/auth` subjects are `user` / `token` / `cron` / `pipeline` / `workflow` / `agent`.

- REST / CLI / Chat are call paths, not subject types.

+ ## Call paths

+ AuthContext spans REST, CLI, Chat, Webhook, Cron, Pipeline, and Workflow. REST / CLI / Chat / Webhook are call paths, not subject types. Cron / Pipeline / Workflow appear as both a subject and a call path.

## Entry points

- `context.go` — AuthContext

- `scope.go` — scope constants and checks

- `token.go` — token helpers