chore(spec): gen:schema 前移 authorable-surface 锚点至合并后的 merge-base (cdfbee2)

合并 origin/main 后重建时由 gen:schema 写出(先 commit merge 再跑生成,
#5370 的锚点倒退陷阱按序避开):baseRev 28ad90e → cdfbee2,随锚点带入
#5312 的 api/ApiEndpoint 键面。check:generated 9/9 up to date,
check:authorable-surface 绿。非手改。

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ErbEDVAg1No9gdg1pgDAGB

Author: claude

packages/spec/authorable-surface.base.json

@@ -1,6 +1,6 @@
 {
   "description": "In-tree anchor for the authorable-surface deletion gate (#4650, #5235): a verbatim copy of the keys in authorable-surface.json as they stood at `baseRev`, a commit on origin/main. A build that CAN reach origin/main anchors on the merge base instead, and re-verifies this file against `baseRev` — so a PR that edits it to hide a deletion goes red wherever the network exists. A build that CANNOT reach GitHub (image-build stages, air-gapped, fork, historical-tag reproduction) anchors here instead of failing. Written only by `gen:schema`, only from a git-resolved baseline — never from the build that is being checked. See #5235.",
-  "baseRev": "28ad90e9adb901e66c96bb5be679f376885aec80",
+  "baseRev": "cdfbee2f08e3316d4606d21dd8e7c2403a59030b",
   "keys": [
     "ai/AIModelConfig:maxTokens",
     "ai/AIModelConfig:model",
@@ -492,6 +492,13 @@
     "api/ApiDocumentationConfig:title",
     "api/ApiDocumentationConfig:ui",
     "api/ApiDocumentationConfig:version",
+    "api/ApiEndpoint:_lock",
+    "api/ApiEndpoint:_lockDocsUrl",
+    "api/ApiEndpoint:_lockReason",
+    "api/ApiEndpoint:_lockSource",
+    "api/ApiEndpoint:_packageId",
+    "api/ApiEndpoint:_packageVersion",
+    "api/ApiEndpoint:_provenance",
     "api/ApiEndpoint:authRequired",
     "api/ApiEndpoint:cacheTtl",
     "api/ApiEndpoint:description",