docs(spec): regenerate the environment-artifact reference page for the grantedPermissions docblock (#14865)

check:generated proved exactly one artifact stale — content/docs/references/** —
and regenerated it (--fix); authorable-surface, api-surface, export-origins and
declaration-map are unchanged by the new optional key.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0174WZTU6XcFcS7g2kykC53i

Author: claude

content/docs/references/system/environment-artifact.mdx

@@ -31,6 +31,13 @@ identity (`commitId`, `checksum`).
   `checksum`.
 - **Deployment Config (NOT in this schema):** business DB coordinates,
   credentials, environment identity, secrets. Injected at runtime.
+- **Consent state (this schema, `grantedPermissions`, #14865):** the
+  install-time GRANTED permission set per plugin, keyed by the plugin
+  manifest `id` — written by the control plane at consent-compile time,
+  read by the loader at materialize time. Control-plane state re-emitted
+  on every artifact assembly, not compiled metadata: it sits beside
+  `metadata`, outside the `checksum` digest. Absent ≠ `{}` — see the
+  key's docblock.
 
 See `content/docs/concepts/north-star.mdx` §6.3 for the
 runtime-inputs boundary.