auth: align Node minimum with service-auth dependency

[Kzoeps]

Summary

• Raise the supported Node.js minimum to 22.19, matching the locked undici_v8 engine requirement.
• Document the accepted pre-launch replay-store saturation risk while retaining one-use tokens and fail-closed behavior.
• No Changeset, as requested.

Validation

• npm run check
• npm test (208 passed)
• npm run build
• git diff --check

[changeset-bot]

⚠️ No Changeset found

Latest commit: 0d6b10b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Warning

Review limit reached

Next included review available in 32 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 1d4f406b-a26f-4193-bfb9-9ec4ae3e0cc9

📥 Commits

Reviewing files that changed from the base of the PR and between 3379e66 and 0d6b10b.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (4)

• AGENTS.md
• README.md
• package.json
• test/release-workflow.unit.test.ts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge.

Summary

The PR raises the declared and documented Node.js minimum to 22.19.0 and records the accepted pre-launch replay-store saturation risk.

• Updates the package manifest, lockfile, and release-workflow assertion consistently.
• Leaves service-auth behavior unchanged.

_{Reviews (1) · Last reviewed commit: "auth: align Node minimum and document re..."}