chore(deps): move the @better-auth/scim pin off the rc onto the stable line (measurement base, #3653)

Part of #3653. NOT a proposed landing: leg 2' stopped on a scope fork before
the provisioning half could be written, so this branch carries the pin move
alone as the reproducible base every measurement in the report was taken on.
A pin-move-only tree is red by construction (7 failed | 21 passed on the
parity gate) and must never be landed on its own.

  - packages/plugins/plugin-auth/package.json  1.7.0-rc.1 -> ^1.7.1
  - pnpm-workspace.yaml  '@better-auth/scim@<1.7.0-rc.1': '1.7.0-rc.1'
                      -> '@better-auth/scim@<2.0.0': '^1.7.1'
    (major-boundary bound, matching the rest of the family per this file's
    own doctrine; the old bound sat AT the rc precisely so a <2.0.0 bound
    could not rewrite the stable release down onto it.)

Measured consequences, all reproducible from this commit:

  - '^1.7.1' resolves to 1.7.2, not 1.7.1. Every prior measurement on this
    epic was taken against 1.7.1. Re-measured on 1.7.2: same seven models,
    same three-way constructor predicate, same absent scimProvider.
  - scim lands on 1.7.2 while the rest of the family stays 1.7.1. 1.7.2 peers
    '@better-auth/core': '^1.7.2' and 'better-auth': '^1.7.2', which 1.7.1
    does not satisfy; this repo's existing overrides rewrite those peer ranges
    down to '^1.7.1' in the lockfile, so nothing reports the mismatch. One
    copy each of better-auth and @better-auth/core remain in the store.
  - check:prerelease-pins retires itself: "No prerelease pin left in
    pnpm-workspace.yaml overrides - nothing to watch", exit 0.

Co-authored-by: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0194kbQJxUvv2yvsGRtuXpP5

Author: os-litant

packages/plugins/plugin-auth/package.json

@@ -26,7 +26,7 @@
   "dependencies": {
     "@better-auth/core": "^1.7.1",
     "@better-auth/oauth-provider": "^1.7.1",
-    "@better-auth/scim": "1.7.0-rc.1",
+    "@better-auth/scim": "^1.7.1",
     "@better-auth/sso": "^1.7.1",
     "@noble/hashes": "^2.3.0",
     "@objectstack/core": "workspace:*",

pnpm-lock.yaml

@@ -184,7 +184,7 @@ overrides:
   # ships the rc.2 rewrite, so adopting it is the ADR-0071 migration (#3653),
   # not this bump. Its bound stays AT the rc on purpose: a major-boundary bound
   # here would rewrite the stable release down onto the rc.
-  '@better-auth/scim@<1.7.0-rc.1': '1.7.0-rc.1'
+  '@better-auth/scim@<2.0.0': '^1.7.1'
   '@better-auth/oauth-provider@<2.0.0': '^1.7.1'
   '@better-auth/sso@<2.0.0': '^1.7.1'
   '@better-auth/drizzle-adapter@<2.0.0': '^1.7.1'