Document auth status and auto-mode CLI surfaces

[bingran-you]

Summary

• extend the auth lifecycle leaf to cover the version-sensitive claude auth status surface
• add a permissions leaf for version-sensitive claude auto-mode defaults/config/critique
• index the new auto-mode introspection leaf under the permissions domain

Verification

• npx -p first-tree first-tree verify
• git diff --check