feat: authStatus() — read-only hub auth-policy snapshot

Regenerated stubs for the additive AuthStatus HubAdmin RPC and a
typed wrapper: active validator, anonymous flag, token entries with
scope grants, rate limits and env-var set-state. Secret values never
cross the wire.

Signed-off-by: flemming-it <stefan.a.flemming@googlemail.com>

lib/src/generated/chain/v1/hub.pbgrpc.dart

@@ -583,6 +583,20 @@ class HubAdminClient extends $grpc.Client {
     return $createUnaryCall(_$reloadAuth, request, options: options);
   }
 
+  /// Read-only snapshot of the authentication policy as persisted
+  /// in the operator config, for operator surfaces (Studio
+  /// Settings → Security). Never carries secret material: token
+  /// entries expose the env-var NAME and whether that variable is
+  /// currently set — never the value; the jwt-rs256 validator
+  /// exposes its key SOURCE (inline / file path), never the key.
+  /// Admin-scoped like ReloadAuth.
+  $grpc.ResponseFuture<$0.AuthStatusResponse> authStatus(
+    $1.Empty request, {
+    $grpc.CallOptions? options,
+  }) {
+    return $createUnaryCall(_$authStatus, request, options: options);
+  }
+
   /// List host services declared in the operator config. Each
   /// entry carries name + endpoint; reachability is operator-side
   /// (on-demand `chain service status` or Studio probe).
@@ -978,6 +992,11 @@ class HubAdminClient extends $grpc.Client {
           '/chain.v1.HubAdmin/ReloadAuth',
           ($1.Empty value) => value.writeToBuffer(),
           $0.ReloadAuthResponse.fromBuffer);
+  static final _$authStatus =
+      $grpc.ClientMethod<$1.Empty, $0.AuthStatusResponse>(
+          '/chain.v1.HubAdmin/AuthStatus',
+          ($1.Empty value) => value.writeToBuffer(),
+          $0.AuthStatusResponse.fromBuffer);
   static final _$listServices = $grpc.ClientMethod<$1.Empty, $0.ServiceList>(
       '/chain.v1.HubAdmin/ListServices',
       ($1.Empty value) => value.writeToBuffer(),
@@ -1333,6 +1352,13 @@ abstract class HubAdminServiceBase extends $grpc.Service {
         false,
         ($core.List<$core.int> value) => $1.Empty.fromBuffer(value),
         ($0.ReloadAuthResponse value) => value.writeToBuffer()));
+    $addMethod($grpc.ServiceMethod<$1.Empty, $0.AuthStatusResponse>(
+        'AuthStatus',
+        authStatus_Pre,
+        false,
+        false,
+        ($core.List<$core.int> value) => $1.Empty.fromBuffer(value),
+        ($0.AuthStatusResponse value) => value.writeToBuffer()));
     $addMethod($grpc.ServiceMethod<$1.Empty, $0.ServiceList>(
         'ListServices',
         listServices_Pre,
@@ -1765,6 +1791,14 @@ abstract class HubAdminServiceBase extends $grpc.Service {
   $async.Future<$0.ReloadAuthResponse> reloadAuth(
       $grpc.ServiceCall call, $1.Empty request);
 
+  $async.Future<$0.AuthStatusResponse> authStatus_Pre(
+      $grpc.ServiceCall $call, $async.Future<$1.Empty> $request) async {
+    return authStatus($call, await $request);
+  }
+
+  $async.Future<$0.AuthStatusResponse> authStatus(
+      $grpc.ServiceCall call, $1.Empty request);
+
   $async.Future<$0.ServiceList> listServices_Pre(
       $grpc.ServiceCall $call, $async.Future<$1.Empty> $request) async {
     return listServices($call, await $request);