feat: extract auth into @marketplaces/auth package, add backoffice admin provisioning spec

- ADR-0001: decision to extract auth/payment into shared @marketplaces/* packages
- Scaffold packages/auth, packages/payment; @marketplaces/auth now holds the real
  telegram (customer+admin QR/session) and ed25519 (future admin challenge/response)
  auth implementation, pushed to sources.vitanova.network/sdarbinyan/vitanovaPackages
- Rewire ~30 call sites to import from @marketplaces/auth; delete migrated originals
  from core/auth, core/admin-auth, services/, models/
- Replace environment coupling with AUTH_API_URL/TELEGRAM_BOT_USERNAME injection
  tokens and isDevMode(); wired as file:packages/auth pending registry publish
- Add TRACK-S §8: bootstrap per-marketplace admin login + marketplace-scoped
  sub-admin invite/role endpoints
- Build, arch:check:boundaries, and full test suite (103/103) all green

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

package-lock.json

@@ -17,6 +17,7 @@
         "@angular/platform-browser": "22.0.8",
         "@angular/router": "22.0.8",
         "@angular/service-worker": "22.0.8",
+        "@marketplaces/auth": "file:packages/auth",
         "rxjs": "~7.8.0",
         "tslib": "^2.8.0",
         "zone.js": "~0.16.0"
@@ -1968,6 +1969,10 @@
         "win32"
       ]
     },
+    "node_modules/@marketplaces/auth": {
+      "resolved": "packages/auth",
+      "link": true
+    },
     "node_modules/@modelcontextprotocol/sdk": {
       "version": "1.29.0",
       "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.29.0.tgz",
@@ -9234,6 +9239,16 @@
       "resolved": "https://registry.npmjs.org/zone.js/-/zone.js-0.16.0.tgz",
       "integrity": "sha512-LqLPpIQANebrlxY6jKcYKdgN5DTXyyHAKnnWWjE5pPfEQ4n7j5zn7mOEEpwNZVKGqx3kKKmvplEmoBrvpgROTA==",
       "license": "MIT"
+    },
+    "packages/auth": {
+      "name": "@marketplaces/auth",
+      "version": "0.1.0",
+      "license": "UNLICENSED",
+      "peerDependencies": {
+        "@angular/common": ">=22.0.0",
+        "@angular/core": ">=22.0.0",
+        "rxjs": ">=7.8.0"
+      }
     }
   }
 }