docs(structural): meta-docs sync per holistic critique

[mghabin]

Applies the META-DOCS findings from the holistic critique (holistic.critique.json).

Per-file changes

README.md

• Baseline corrected: .NET 10 / C# 14 / Aspire (with explicit split: Aspire 9.x for net8/9 services, Aspire 13 for net10 services; rebrand to 'Aspire' / aspire.dev noted).
• Advertised decision-tree list rewritten to match the actual docs/decision-trees.md set (now 17 trees, including Aspire scope and Cosmos partition key — added in this PR).
• Chapter blurbs updated: ch01 says C# 14, ch02 says 'separate delegated and app-only policies' (mirrors §10), ch06 says Aspire 9.x/13 split.

SCOPE.md

• C# 14 baseline (with link to whats-new/csharp-14 + the configure-language-version doc that explains TFM-driven defaults).
• Aspire baseline restated as the 9.x / 13 split.
• Reading paths (§6.1/6.2/6.3) now start with docs/decision-trees.md, matching README's positioning of decision-trees as the synthesis entrypoint.

glossary.md

Added (alphabetically, with Source: lines pointing at primary sources):

• DistributedApplicationTestingBuilder (Aspire testing host)
• dotnet-affected (monorepo CI fan-out)
• Federated Identity Credentials (Entra → external OIDC issuers)
• RequiredScope (Microsoft.Identity.Web attribute, ch02 §10)
• slnx (.NET 9 solution format) (the XML solution format)
• Traversal SDK (Microsoft.Build.Traversal)
• Workload Identity (AKS keyless workload-auth)

coverage-map.md

• ch02 ownership expanded: HttpClient (§11), OutputCache (§9), BackgroundWork (§12), Security (§14), gRPC (§16), SignalR (§17), HealthChecks endpoint mapping (§18, with explicit note that ch06 §10 owns the probe contract). Auth section (§10) now states 'separate delegated and app-only policies'. Resilience (§7) named as single owner with ch06 referencing it.
• ch06 ownership expanded: Configuration (§4), Resilience pipeline (§6, non-HTTP), HealthChecks probe contract (§10 — owns endpoint names + semantics), GracefulShutdown (§11), CI/CD (§12), Networking (§13), Multi-tenancy (§14), Cost (§15). Aspire entry restated as 9.x/13 split.
• Checklist block weakened from 'every line links to its owning chapter' to an accurate description of the footer chapter index, matching what checklist.md actually does.

docs/decision-trees.md

• Tree 12 (Auth) rewritten to mirror ch02 §10 — two separate named policies (delegated requires scp; app-only requires roles + azp allow-list + absence of scp), composed at the endpoint via RequireAuthorization('Delegated','App'). The previous 'combined OR-claims policy' branch (which ch02 explicitly rejects as a privilege-escalation bug) is gone.
• Tree 15 (Resilience) points to single owner ch02 §7 (docs/02-aspnetcore.md#7-resilience); ch06 references that section, doesn't co-own it. Hedging branch now uses AddStandardHedgingHandler.
• All other trees: References: lines converted from file-level links to section-anchor links.
• Tree 16 (Aspire scope) added: Aspire.Hosting.* belongs in the AppHost project only; Aspire.<Vendor>.<Tech> client integrations belong in the service project. Routes to ch06 §1.
• Tree 17 (Cosmos partition key) added: high-cardinality + on-the-dominant-read-path + write-distributed; if two read patterns conflict, fan out via change feed to a second container. Routes to ch03 §1 / §8.

patterns/anti-patterns.md

• 'God csproj' fix is now architecture-neutral: vertical slice (Bogard), clean/onion (Ardalis), and modular monolith (Grzybek) are all valid endpoints. The rule is split at bounded-context seams, with the host as the only infra-referencing project — not 'use Clean Architecture'.

Style

• - bullets, primary-source URLs on every new normative claim, one sentence per line in new prose, no heading skips.

Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com