#22120 Expose current team and install authority

Cloud requests lacked a way to detect membership, grant or policy changes. Account listings now include confirmed team references, and install.authority returns the calling client’s bound IDs and an opaque cache version. It takes no selectors and grants no permission.

Registration retries after ledger pruning cannot reuse an existing install or grant ID. TypeScript and Rust clients are regenerated.

All 404 backend tests pass for ab236e83802b. The Rust wire consumer test passes on Linux and Mac at c241ab34115a.

Changelog

Changed: Account listings and client installs expose current authority versions.