feat: adds Experiment Center APIs (EA), client OIDC support, and consent non-repudiation; removes organization template sub-client

[fern-api]

Changes

SDK regeneration from the Auth0 OpenAPI spec via Fern. Adds Experiment Center (A/B testing) as a full Early Access CRUD surface, OIDC client support configuration, and resource server consent non-repudiation. Removes the organizations.organization_template sub-client now that those endpoints are marked internal upstream.

🆕 New endpoints / types:

• Experiment Center APIs (EA) - new client.experimentation accessor with four sub-clients: experiments (list, create, get, delete, update, advance_ramp, update_status, validate), feature_flags (list, create, get, delete, update, update_status), feature_flags.variations (list, create, get, delete, update), and segments (list, create, get, delete, update), under experimentation/experiments, experimentation/feature-flags, and experimentation/segments. New OauthScope constants: create:experimentation, read:experimentation, delete:experimentation. Supporting types include ExperimentListItem, ExperimentStatusEnum, ExperimentTransitionStatusEnum, AllocationStrategyEnum, DefaultConfigEnum, AuthenticationFlowEnum, FeatureFlag, FeatureFlagConfigParam, FeatureFlagStatusEnum, FeatureFlagTypeEnum, Segment, SegmentMatchConditions, SegmentTypeEnum, Variation, VariationOverridesMap, and ExperimentValidationError.

✏️ Modified endpoints (new properties):

• Client OIDC Support - oidc_support on client create (POST /api/v2/clients), backed by new ClientOidcSupportPost (is_allowed, allow_all_scopes, allowed_scopes) and ClientOidcSupportAllowedScopesEnum (profile, email, address, phone)
• Client notification channel - my-account added to AsyncApprovalNotificationsChannelsEnum (client create/update/response)
• Client backchannel logout initiator - profile-changed added to ClientOidcBackchannelLogoutInitiatorsEnum (client create/update/response)
• Resource server consent non-repudiation - require_consent_non_repudiation (bool) on resource server create/update/response (POST/PATCH/GET /api/v2/resource-servers)

⚠️ Breaking Changes:

• client.organizations.organization_template removed - the organization_template sub-client (get, update, delete on organizations/{id}/template) and all supporting types (OrganizationTemplate, OrganizationTemplateAllowedStrategyEnum, OrganizationTemplateRoleVisibilityEnum, OrganizationTemplateRoleVisibilityOverride, OrganizationTemplateRoleVisibilityPolicy, OrganizationTemplateUseForOrganizationDiscovery) are removed. OauthScope::READ_ORGANIZATION_TEMPLATES, ConnectionDeletionBehaviorEnum, and OrganizationDeletionBehaviorEnum are also removed. PR feat: add Experiment Center advance-ramp, Guardian AFC factor settings, and Anonymous Sessions fields; remove top-level OrganizationTemplates client #803 directed callers to client.organizations.organization_template as the migration path from the removed top-level client. That path is now also removed.

Testing

Existing wire tests were regenerated to match the updated client. The live-tenant integration test passes against a dev tenant, and the new types load correctly.

• This change adds unit test coverage
• This change adds integration test coverage
• This change has been tested on the latest version of Ruby

Checklist

• I have read the Auth0 general contribution guidelines
• I have read the Auth0 Code of Conduct
• All existing and new tests complete without errors
• Rubocop passes on all added/modified files
• All active GitHub checks have passed

[kishore7snehil]

LGTM!