chore(spec): regenerate the public API surface snapshot

Adding ISecurityService and its companion types exports six new names from
`@objectstack/spec/contracts`; the api-surface gate pins the public surface
so additions have to be acknowledged. Diff is exactly those six additions —
0 removed, 0 narrowed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KZ2BGusRo58ZW8FMkDhGTb

Author: claude

packages/spec/api-surface.json

@@ -3425,6 +3425,9 @@
     "ApprovalSendBackResult (interface)",
     "ApprovalStatus (type)",
     "AssistantModelMessage (type)",
+    "AudienceBindingSuggestion (type)",
+    "AudienceBindingSuggestionFilter (interface)",
+    "AudienceBindingSuggestionSync (interface)",
     "AuthResult (interface)",
     "AuthSession (interface)",
     "AuthUser (interface)",
@@ -3452,6 +3455,7 @@
     "EmailAttachment (interface)",
     "EmailDeliveryStatus (type)",
     "ExecuteUpgradeInput (interface)",
+    "ExplainAccessRequest (interface)",
     "ExportJobDownload (interface)",
     "ExportJobListResult (interface)",
     "FinishReason (type)",
@@ -3508,6 +3512,7 @@
     "ISchemaDiffService (interface)",
     "ISchemaDriver (interface)",
     "ISearchService (interface)",
+    "ISecurityService (interface)",
     "ISeedLoaderService (interface)",
     "IServiceRegistry (interface)",
     "IShareLinkService (interface)",
@@ -3611,6 +3616,7 @@
     "SearchHit (interface)",
     "SearchOptions (interface)",
     "SearchResult (interface)",
+    "SecurityContext (type)",
     "SendEmailInput (interface)",
     "SendEmailResult (interface)",
     "SendSmsInput (interface)",