feat(auth-broker): register dry-run service surface

config.json

@@ -765,6 +765,51 @@
         "mode": "internal-sidecar"
       }
     },
+    {
+      "id": "auth-broker",
+      "name": "Auth Broker",
+      "providerId": "main-server",
+      "description": "Auth Broker 是主 server 私有鉴权代理 skeleton，为 Code Queue PR preflight 和 GitHub issue/PR dry-run 提供 broker-held credential ref 语义；当前只登记 source/contract/profile，不启用 live secret 或公网入口。",
+      "repository": {
+        "url": "https://github.com/pikasTech/unidesk",
+        "commitId": "local",
+        "dockerfile": "src/components/microservices/auth-broker/Dockerfile",
+        "composeFile": "docker-compose.yml",
+        "composeService": "auth-broker",
+        "containerName": "auth-broker-backend"
+      },
+      "backend": {
+        "nodeBaseUrl": "http://auth-broker:4291",
+        "nodeBindHost": "auth-broker",
+        "nodePort": 4291,
+        "proxyMode": "unidesk-direct",
+        "frontendOnly": true,
+        "public": false,
+        "allowedMethods": [
+          "GET",
+          "HEAD",
+          "POST"
+        ],
+        "allowedPathPrefixes": [
+          "/health",
+          "/v1/github/"
+        ],
+        "healthPath": "/health",
+        "timeoutMs": 10000
+      },
+      "development": {
+        "providerId": "main-server",
+        "sshPassthrough": false,
+        "worktreePath": "/root/unidesk/src/components/microservices/auth-broker"
+      },
+      "frontend": {
+        "route": "/apps/auth-broker",
+        "integrated": false
+      },
+      "deployment": {
+        "mode": "internal-sidecar"
+      }
+    },
     {
       "id": "mdtodo",
       "name": "MDTODO",