fix(spec): book sys_team.actions.add_team_member under the organization gate

Co-authored-by: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JrXUZYyTV4i588KLZRxSvJ

Author: claude

.changeset/25337-spec-book-team-add-member.md

@@ -0,0 +1,12 @@
+---
+'@objectstack/spec': patch
+---
+
+fix(spec): book the team-side Add Member action under the `organization` feature gate
+
+Clause-②: no
+Metadata-protocol: none
+
+`PUBLIC_AUTH_FEATURES.organization.gatedInputs` now lists `sys_team.actions.add_team_member`, right after `sys_team.actions.remove_team`. `@objectstack/platform-objects` declares that action on `sys_team` (Add Member opened from a team, which binds the team) with `requiresFeature: 'organization'`, and the booking keeps the two sides agreeing: every action gated on a feature is listed under it, and every listed input carries the gate. The membership-list copy, `sys_team_member.actions.add_team_member`, keeps its own row unchanged.
+
+What to do: nothing. No key, value or predicate changes; the list gains one entry.

packages/spec/src/kernel/public-auth-features.ts

@@ -123,6 +123,7 @@ export const PUBLIC_AUTH_FEATURES = {
       'sys_team.actions.create_team',
       'sys_team.actions.update_team',
       'sys_team.actions.remove_team',
+      'sys_team.actions.add_team_member',
       'sys_team_member.actions.add_team_member',
       'sys_team_member.actions.remove_team_member',
       // Fourth mirror of the email-invite entry, at the organization record