Auth Flow 'What the Operator Creates' duplicates the operator's reconciler docs #47

The Authentication flow page (docs/auth-flow.md and its site copy) has a "What the Operator Creates" section that hand-maintains the names and shapes of the resources the operator generates: the HTTPRoute, public HTTPRoute, SecurityPolicy, Certificate, the OIDC Secret and its keys, and the Secret reader Role.

That's the same problem #30/#45 fixed for the field tables. The operator already documents these in docs/reconcilers/authentication.md and docs/reconcilers/routing.md, and the copy here has drifted before (#38 corrected the resource names).

Cut the section down to a short summary of what a pack author needs to know, plus links to the reconciler docs at the pinned operator tag, the same treatment the NebariApp CRD reference page got.