refactor(arch): enforce gateway compliance and remove service-wrapping gateways

lib/Http/ApiAuth.php

@@ -6,14 +6,14 @@ use MintyPHP\Repository\Access\RolePermissionRepository;
 use MintyPHP\Repository\Access\UserRoleRepository;
 use MintyPHP\Service\Access\AuthorizationService;
 use MintyPHP\Service\Auth\ApiTokenService;
-use MintyPHP\Service\Auth\AuthScopeGateway;
+use MintyPHP\Service\Tenant\TenantScopeService;
 use MintyPHP\Service\User\UserTenantContextService;
 
 // Static facade for API authentication — state is set once per request during ApiBootstrap::init().
 // Dependencies are injected as lazy resolvers so services are only instantiated when actually needed.
 class ApiAuth
 {
-    /** @var (callable(): AuthScopeGateway)|null */
+    /** @var (callable(): TenantScopeService)|null */
     private static $authScopeGatewayResolver = null;
 
     /** @var (callable(): ApiTokenService)|null */
@@ -239,9 +239,9 @@ class ApiAuth
         }
     }
 
-    private static function scopeGateway(): AuthScopeGateway
+    private static function scopeGateway(): TenantScopeService
     {
-        return self::resolveDependency(self::$authScopeGatewayResolver, AuthScopeGateway::class, 'ApiAuth');
+        return self::resolveDependency(self::$authScopeGatewayResolver, TenantScopeService::class, 'ApiAuth');
     }
 
     private static function apiTokenService(): ApiTokenService