fix(auth): resolve the cache service via getServiceAsync (async-registered)

The kernel registers `cache` as an ASYNC service, so the sync
`ctx.getService('cache')` throws "Service 'cache' is async - use await"
at AuthPlugin.init — breaking bootstrap (caught by the dogfood gate,
which boots the real kernel; unit tests don't). Resolve via
`getServiceAsync` wrapped in try/catch so an absent/not-ready cache
falls to the per-process warning path instead of crashing boot.

Verified: dogfood 36 files / 181 tests green; plugin-auth units green.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014y5kiH3aPLWtRRRGcVrXcT

Author: claude

packages/plugins/plugin-auth/src/auth-plugin.ts

@@ -165,7 +165,15 @@ export class AuthPlugin implements Plugin {
     // when no cache service is registered — with a warning, because a multi-node
     // deployment then silently rate-limits per-process (ADR-0069 D2 honesty).
     if (!authConfig.secondaryStorage) {
-      const cache = ctx.getService<any>('cache');
+      // The `cache` service is registered ASYNC — `getService` throws for it,
+      // so resolve via `getServiceAsync` and treat any failure (not registered,
+      // or not yet ready) as "no shared cache".
+      let cache: any;
+      try {
+        cache = await (ctx as { getServiceAsync?: (n: string) => Promise<unknown> }).getServiceAsync?.('cache');
+      } catch {
+        cache = undefined;
+      }
       if (cache && typeof cache.get === 'function' && typeof cache.set === 'function') {
         const { cacheSecondaryStorage } = await import('./secondary-storage.js');
         authConfig.secondaryStorage = cacheSecondaryStorage(cache);