WorkOS auth.md

Design, implement, or review agent registration against the experimental WorkOS auth.md proposal. Treat v0.6.0 as a changing proposal, not a stable RFC. Verify upstream before implementation and state the version, upstream commit or document date, and review date in every design or audit.

Issue the safety verdict before code

When a request proposes a shortcut or conflates protocols, begin with a compact checklist verdict before any implementation detail. Cover every applicable item in that checklist before expanding any one item, so a concise or truncated answer does not hide a critical control: