feat: extract auth into @marketplaces/auth package, add backoffice admin provisioning spec

- ADR-0001: decision to extract auth/payment into shared @marketplaces/* packages
- Scaffold packages/auth, packages/payment; @marketplaces/auth now holds the real
  telegram (customer+admin QR/session) and ed25519 (future admin challenge/response)
  auth implementation, pushed to sources.vitanova.network/sdarbinyan/vitanovaPackages
- Rewire ~30 call sites to import from @marketplaces/auth; delete migrated originals
  from core/auth, core/admin-auth, services/, models/
- Replace environment coupling with AUTH_API_URL/TELEGRAM_BOT_USERNAME injection
  tokens and isDevMode(); wired as file:packages/auth pending registry publish
- Add TRACK-S §8: bootstrap per-marketplace admin login + marketplace-scoped
  sub-admin invite/role endpoints
- Build, arch:check:boundaries, and full test suite (103/103) all green

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

packages/README.md

@@ -0,0 +1,11 @@
+# packages/
+
+Scaffolding for `@marketplaces/auth` and `@marketplaces/payment` — see [ADR-0001](../docs/context/adrs/ADR-0001-extract-auth-and-payment-into-shared-marketplaces-packages.md).
+
+These are standalone-buildable packages (their own `package.json`/`tsconfig.json`), not yet wired into this repo's Angular build and not yet containing migrated code. They live here temporarily so the structure, versioning, and CI can be reviewed before:
+
+1. a target git repo is created for each package (or one shared repo, per ADR),
+2. code moves out of `src/app/core/auth`, `src/app/core/admin-auth`, `src/app/core/finance`, `src/app/core/pricing`,
+3. this repo switches to installing them as normal npm dependencies.
+
+See [docs/PACKAGE-EXTRACTION.md](../docs/PACKAGE-EXTRACTION.md) for the full build/version/publish/consume workflow.