feat(api): add an optional registered-read interface

[Upd4ting]

Purpose

Add the optional @antelopejs/interface-api/registered-read subinterface without changing the root interface required of existing providers. This is a dependency foundation, not a complete document-attachment authorization implementation.

ExecuteRegisteredRead accepts a trusted registered GET route ID, a strict absolute pathname and optional server-selected query values. The provider runs the route's actual authorization pipeline in an isolated request. The caller must select the target from trusted server configuration and validate the returned entity and content; registration alone is not object authorization.

The contract preserves credentials and peer address metadata on a detached transport. It refuses response interception, non-success statuses, redirects and streams. Transport-specific TLS methods and the live parent socket are deliberately not exposed. Parent query parameters are never inherited.

Verification

• pnpm test: 83 passing.
• pnpm lint, pnpm format:check, pnpm pack: pass; existing lint warnings remain.
• The packed subpath is exercised by the companion API provider's 38 registered-read tests.
• Oracle review completed; reported provider defects were corrected in the companion implementation.

Release order

Companion provider: AntelopeJS/api#40.

This PR must be merged and a new interface version published before the companion API provider can update its dependency floor and frozen lockfile. The current published package does not contain this export. No package publication, merge or deployment is part of this PR request.