fix(ci): commit api-surface snapshot (9 intentional additions) + regenerated action reference doc

- api-surface: the #2874 registry exports (PUBLIC_AUTH_FEATURES et al.)
  are intentional public API - snapshot updated via gen:api-surface.
- references/ui/action.mdx: regenerated. ActionParamSchema now ends in a
  .transform() (the requiresFeature lowering), which z.toJSONSchema
  cannot represent on the output side, so the generator drops the
  ActionParam block - the same pre-existing behavior as ActionSchema and
  ObjectSchema. The authoritative ActionParam field documentation lives
  in the hand-written protocol doc
  (content/docs/protocol/objectui/actions.mdx), updated in this PR.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HGofzwNXvtahMGk8TQqXdx

Author: claude

content/docs/references/ui/action.mdx

@@ -48,8 +48,8 @@ to the field name and is used as the request-body key).
 ## TypeScript Usage
 
 ```typescript
-import { ActionAi, ActionLocation, ActionParam, ActionType } from '@objectstack/spec/ui';
-import type { ActionAi, ActionLocation, ActionParam, ActionType } from '@objectstack/spec/ui';
+import { ActionAi, ActionLocation, ActionType } from '@objectstack/spec/ui';
+import type { ActionAi, ActionLocation, ActionType } from '@objectstack/spec/ui';
 
 // Validate data
 const result = ActionAi.parse(data);
@@ -86,27 +86,6 @@ const result = ActionAi.parse(data);
 * `global_nav`
 
 
----
-
-## ActionParam
-
-### Properties
-
-| Property | Type | Required | Description |
-| :--- | :--- | :--- | :--- |
-| **name** | `string` | optional |  |
-| **field** | `string` | optional | Snake case identifier (lowercase with underscores only) |
-| **objectOverride** | `string` | optional | Snake case identifier (lowercase with underscores only) |
-| **label** | `string` | optional | Display label (plain string; i18n keys are auto-generated by the framework) |
-| **type** | `Enum<'text' \| 'textarea' \| 'email' \| 'url' \| 'phone' \| 'password' \| 'secret' \| 'markdown' \| 'html' \| 'richtext' \| 'number' \| 'currency' \| 'percent' \| 'date' \| 'datetime' \| 'time' \| 'boolean' \| 'toggle' \| 'select' \| 'multiselect' \| 'radio' \| 'checkboxes' \| 'lookup' \| 'master_detail' \| 'tree' \| 'user' \| 'image' \| 'file' \| 'avatar' \| 'video' \| 'audio' \| 'formula' \| 'summary' \| 'autonumber' \| 'composite' \| 'repeater' \| 'record' \| 'location' \| 'address' \| 'code' \| 'json' \| 'color' \| 'rating' \| 'slider' \| 'signature' \| 'qrcode' \| 'progress' \| 'tags' \| 'vector'>` | optional |  |
-| **required** | `boolean` | ✅ |  |
-| **options** | `Object[]` | optional |  |
-| **placeholder** | `string` | optional |  |
-| **helpText** | `string` | optional |  |
-| **defaultValue** | `any` | optional |  |
-| **defaultFromRow** | `boolean` | optional |  |
-
-
 ---
 
 ## ActionType

packages/spec/api-surface.json

@@ -1531,6 +1531,9 @@
     "OpsPluginStructureSchema (const)",
     "PROTOCOL_MAJOR (const)",
     "PROTOCOL_VERSION (const)",
+    "PUBLIC_AUTH_CONFIG_NON_FLAG_KEYS (const)",
+    "PUBLIC_AUTH_FEATURES (const)",
+    "PUBLIC_AUTH_FEATURE_NAMES (const)",
     "PackageArtifact (type)",
     "PackageArtifactInput (type)",
     "PackageArtifactSchema (const)",
@@ -1670,6 +1673,10 @@
     "ProtocolReferenceSchema (const)",
     "ProtocolVersion (type)",
     "ProtocolVersionSchema (const)",
+    "PublicAuthFeatureEntry (type)",
+    "PublicAuthFeatureName (type)",
+    "PublicAuthFeatureSemantics (type)",
+    "PublicAuthFeatureSurface (type)",
     "RealTimeNotificationConfig (type)",
     "RealTimeNotificationConfigSchema (const)",
     "RequiredAction (type)",
@@ -1759,12 +1766,14 @@
     "evaluateLockForDelete (function)",
     "evaluateLockForWrite (function)",
     "extractProtection (function)",
+    "featureGatePredicate (function)",
     "getMetadataCreateSeed (function)",
     "getMetadataTypeActions (function)",
     "getMetadataTypeSchema (function)",
     "isConsumerInstallable (function)",
     "listMetadataCreateSeedTypes (function)",
     "listMetadataTypeSchemaTypes (function)",
+    "lowerRequiresFeature (function)",
     "registerMetadataTypeActions (function)",
     "registerMetadataTypeSchema (function)",
     "resolveLockState (function)",