refactor: rename lib/ to core/ for clearer core-module separation

Rename the top-level lib/ directory to core/ so the project root
immediately communicates which code is core platform and which lives
in modules/. PHP namespaces (MintyPHP\*) are unchanged — only the
Composer PSR-4 path mapping moves from lib/ to core/.

Module-internal lib/ directories (modules/*/lib/) are untouched.

Updated across the full stack:
- composer.json PSR-4 mapping
- bootstrap entry points (web/index.php, bin/*, tests/bootstrap.php)
- tooling configs (phpstan.neon, phpunit.xml, php-cs-fixer)
- 26 architecture contract tests
- enforcement-policy, guard-catalog, quality-gates
- all documentation (CLAUDE.md, README, 25 docs/, .agents/skills/)
- bin/qa-extended.sh search paths
- .claude/settings.local.json permission paths

Workflow: .agents/runs/CORE-LIB-RENAME-001/ (Analyst → Planner →
Executor → Code Review (4 findings fixed) → Security Review →
Acceptance Test → Finalizer)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

core/Repository/Auth/ApiTokenRepositoryInterface.php

@@ -0,0 +1,45 @@
+<?php
+
+namespace MintyPHP\Repository\Auth;
+
+/** Contract for API bearer token creation, lookup by selector or UUID, and revocation. */
+interface ApiTokenRepositoryInterface
+{
+    public function isUuid(string $value): bool;
+
+    public function create(
+        int $userId,
+        string $name,
+        string $selector,
+        string $tokenHash,
+        ?int $tenantId,
+        ?string $expiresAt,
+        ?int $createdBy
+    ): ?int;
+
+    public function findBySelector(string $selector): ?array;
+
+    public function find(int $id): ?array;
+
+    public function findByUuid(string $uuid): ?array;
+
+    public function findByUuidForUser(string $uuid, int $userId): ?array;
+
+    public function updateLastUsed(int $id, string $ip): bool;
+
+    public function revoke(int $id): bool;
+
+    public function revokeByUuidForUser(string $uuid, int $userId): bool;
+
+    public function revokeAllForUser(int $userId, ?int $tenantId = null): int;
+
+    public function revokeAllActiveByAdmin(): int;
+
+    public function listByUserId(int $userId, int $limit = 25): array;
+
+    public function countActiveForUser(int $userId): int;
+
+    public function countActiveForUserExcludingId(int $userId, int $excludeId): int;
+
+    public function countActive(): int;
+}