• [new] Auth lock acquire path: auth lock: attempting acquire / auth lock: acquired with path, pid, and timeout_ms; auth.json.lock written beside auth.json
• [new] Auth update completion events: auth update disk written (elapsed_ms) and auth update enrichment done (lock_wait_ms, user_ms, write_ms, total_ms)
• [new] auth.refresh.success with expires_at and key_changed
• [new] Model catalog auth-refresh watcher: started/triggered/updated-catalog events (had_real_catalog, model_count_before/after, was_recovery); model catalog: fetching / fetch succeeded with fetch_auth, has_auth, model_count
• [new] OIDC refresh flow events: oidc refresh enter (reason PreRequest, is_expired, has_current), oidc refresh attempting idp (issuer, client_id, has_rt, expires_at), oidc try_refresh_pure enter / succeeded (issuer, client_id, expires_at, wall/mono/suspended_ms, suspected_suspend)