docs(spec): rls 模块 docblock 的语法一行同样按实测形态重述(已发布面)

PM 复核裁定:该行与属性级 TSDoc 性质不同,应并入本 PR。

`packages/spec/src/security/rls.zod.ts:79` 的
「A small, fixed expression grammar (equality, set-membership, always-true)」
是**模块级** docblock,会逐字渲染到 content/docs/references/security/rls.mdx:79
—— 与属性级 TSDoc(不进生成器,留给 #6919)不同,它是已发布面。

不改的话,本 PR 合入后同一张渲染页会自相矛盾:`:79` 说三项,`:174` 是按实测
改正的 using 行,而读者先撞上 `:79`。

改法与 `.describe()` 同一口径:讲能被下推的形态、canonical CEL,⛔ 不换一个
新的固定计数(「三」换「八」是同一个缺陷)。实测依据:比较算子全套、对
`current_user.*` 数组与内联字面量列表的 `in`、`&&`/`||` 均真正下推;其余
fail-closed。

现在 rls.mdx 相对 origin/main 恰好两行变化,且页内无残留旧说法。

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018ffcE95NaMJcL9XJ9VDYgk

Author: claude

content/docs/references/security/rls.mdx

@@ -76,7 +76,7 @@ Salesforce:
 - Manual Sharing: Individual record sharing
 
 ObjectStack RLS:
-- A small, fixed expression grammar (equality, set-membership, always-true)
+- A constrained CEL predicate grammar: comparisons and set-membership against literals or `current_user.*` values, composable with `&&` / `||`; anything that does not lower to a filter fails closed
 - Subquery-shaped needs are pre-resolved by the runtime (§7.3.1)
 - Multiple policies OR-combine for union (any-match-allows) semantics
 

packages/spec/src/security/rls.zod.ts

@@ -76,7 +76,7 @@ import { strictObject } from '../shared/strict-object';
  * - Manual Sharing: Individual record sharing
  * 
  * ObjectStack RLS:
- * - A small, fixed expression grammar (equality, set-membership, always-true)
+ * - A constrained CEL predicate grammar: comparisons and set-membership against literals or `current_user.*` values, composable with `&&` / `||`; anything that does not lower to a filter fails closed
  * - Subquery-shaped needs are pre-resolved by the runtime (§7.3.1)
  * - Multiple policies OR-combine for union (any-match-allows) semantics
  *