chore: scaffold oO monorepo with architecture, roadmap, and module stubs

services/auth/README.md

@@ -0,0 +1,14 @@
+# auth
+
+OAuth-based identity. **Do not roll your own crypto or session logic** — back this with Auth.js or Ory Kratos+Hydra.
+
+## Responsibilities
+
+- Google OAuth (Phase 0), Apple OAuth (Phase 0.5), extensible to others.
+- Issue short-lived JWTs + rotating refresh tokens; HttpOnly cookies for web.
+- Expose `GET /me` (who am I), `POST /logout`, OIDC-style `/.well-known` endpoints.
+
+## Non-goals
+
+- Password auth. Ever.
+- User-profile data — that lives in `profile/`.