fix(auth): A2A cannot express task-level discovery access — spec designates three operations publicly accessible

fix(auth): A2A cannot express task-level discovery access — spec designates three operations publicly accessible #1147