refactor: drop auth/ package entirely

Remove auth/audit (too simple for real use — no target, no org scoping,
no publishing) and auth/oidc (already dropped earlier).

Proper audit logging with standardized schema tracked in #87.
CLI authentication tracked in #86.

Author: ravisuhag