[Wilsoon7721]

• Core is now standards-only. Provider-specific behaviour moves to provider profiles (defineProfile, createAuthClient). WilsoonID ships as @wilsoon/auth-provider-wilsoon, with its extras under client.wilsoon.*
• Roles and permissions are open string lists read via rolesClaim / permissionsClaim, checked with hasRole / hasPermission, fails when unset
• Added liveAccess(), silentAuthorize() and enforce: "live" in the Next.js middleware
• Added error codes PROFILE_REQUIRED, FOREIGN_SESSION, SILENT_AUTH_UNAVAILABLE and INVALID_CONFIG
• Storage names now default to oidc_*.
• Removed CookieStorage, parseIdToken(), isTokenExpired() and the User alias
• INTEGRATION.md moved into the docs Recipes chapter, with READMEs and docs updated for 3.0
• CI: version bumps merged to main publish to npm and tag the release, lint check added

auth-core, auth-react and auth-next go to 3.0.0, auth-machine is unchanged. See CHANGELOG.md for migration.