Release v1.24.5

docs(release): cut v1.24.5 changelog, upgrading, and roadmap.

Align AUTH-005 / QR docs with base enabled + prod overlay disabled.

Changelog

Fixed

• AUTH-005 docs: operator docs now match the real QR login split — base qr_login.mode: enabled (local / PHPUnit / E2E); production disables via config/packages/prod/nowo_auth_kit.yaml. Corrected ENGINEERING-AUDIT, API, UPGRADING, and ROADMAP (they previously described a stale when@dev / when@test overlay pattern).

Notes for integrators

• No Doctrine migrations and no Composer pin changes.
• After pull: no runtime steps. Prefer reading AUTH-005 / QR notes in API.md and ENGINEERING-AUDIT.md.
• See UPGRADING.md Upgrading from 1.24.4 to 1.24.5.