docs(adr): ADR-0111 — record-share management authority and the verb boundary (#3952)

Design record for #3902: sharing gains a management-authority model (canManageShares, manage_sharing capability, service-level enforcement) and an explicit verb boundary (a share widens rows, never verbs; edit does not grant delete). Ten rulings across the per-record share, sharing-rule, and share-link surfaces, grounded against Salesforce / Dataverse / Odoo.

Author: os-zhuang

.changeset/adr-0111-draft-only.md

@@ -0,0 +1,7 @@
+---
+---
+
+ADR-0111 (docs only, releases nothing): record sharing needs a management-authority
+model ("who may manage a share") and an explicit verb boundary ("which verbs a
+share level grants"). Design record for the #3902 fixes — the unauthorized
+`/shares` and `/sharing/rules` surfaces, and `edit`-level share also opening delete.