[MOCK-02] Add deterministic auth, tenant, command, telemetry, webhook, and failure scenarios

[jaavid]

Background

CoreLink is one product across multiple implementation repositories. This work is owned by mock-server under EPIC-05.

Problem

The repository does not yet provide a supported, reproducible and acceptance-tested way to add deterministic auth, tenant, command, telemetry, webhook, and failure scenarios.

Goal

Add deterministic auth, tenant, command, telemetry, webhook, and failure scenarios, aligned with tagged contracts and the shared CoreLink release train.

Parent

• Primary Product Epic: EPIC-05
• Backlog ID: MOCK-02

Scope

• Deliver the title outcome inside mock-server.
• Reconcile contract version, authentication, tenancy, error, compatibility, packaging and documentation behavior where applicable.
• Retain evidence for the Beta gate.

Out of Scope

• Hand-written divergence from the normative contracts.
• Unsupported production claims before an artifact and conformance evidence exist.
• A separate repository roadmap.

Acceptance Criteria

• The outcome is reproducible from documented inputs and tagged dependencies.
• Expected, error, retry/recovery and compatibility behavior is verified.
• Authentication, tenant context and sensitive-data handling are safe where applicable.
• Installable artifacts or explicit scaffold status are documented accurately.
• Examples and documentation are versioned and runnable.
• Conformance evidence is linked to the parent Epic.

Technical Notes

Generated artifacts must identify immutable contract provenance. Security-sensitive tools use least privilege, explicit consent, audit and safe token handling. Package channels must distinguish prerelease from stable.

Dependencies

• Blocked by: MOCK-01, accepted contracts
• Blocks: Resolved during refinement.
• Cross-repository: Link concrete contract, mock, documentation and release Issues.

Planning Metadata

• Type: Feature
• Priority: P0
• Product milestone: Beta
• Domains: devex, api
• Area: backend
• Complexity: L
• Initial status: Triage
• DRI: Unassigned
• Intended labels: type:feature, priority:p0, domain:devex, domain:api, area:backend

Definition of Done

• Acceptance criteria demonstrated.
• Tests/conformance and required evidence pass.
• Contracts are updated or confirmed unaffected.
• Security and tenancy boundaries are reviewed.
• Packaging, provenance and rollback are verified.
• Documentation and release notes are updated.
• Pull request(s) are merged and linked.