auth-spec v2.0.1 — add no-harm-floor CI lint (F9/P3.6); contract unchanged from v2.0.0