chore(oss): audit the server package and resync the SDK mirrors

Split the 657-line operation service into eor, submit, and verify
modules, add the AGENT_REVOKED and KEY_RETIRED codes the Backend already
emits, and condense every multi-line comment. Mirror Node, Python, and
Go at 2.1.0 with the deep-health 503, non-idempotent retry, rotation
grace, and path-encoding fixes. Document which routes and response
fields the self-hosted server does not provide.

Claude-Session: https://claude.ai/code/session_01Agoc9bRVE9KL7mmWtey9Vq

packages/server/src/services/auth-service.ts

@@ -1,10 +1,4 @@
-/**
- * Auth service — password hashing and user profile retrieval.
- *
- * Authentication is handled by Better Auth (see lib/auth.ts).
- * This service provides password utilities for legacy PBKDF2 hash
- * verification and the getMe profile query.
- */
+/** Auth service: password hashing and user profile retrieval. */
 
 import { AppError } from '../middleware/error-handler.js';
 import type { RbacRole } from '../shared/index.js';