Document Directus production contract and repair auth

directus/reference/deployment-inventory.md

@@ -0,0 +1,29 @@
+# Directus Deployment Inventory
+
+Generated from the running production container.
+
+- Directus version: 12.1.1
+- Container image: directus/directus:latest
+- Public URL: https://forms.lasereverything.net
+- Host binding: 127.0.0.1:8056
+- Database client: mysql
+- Database service and database names: intentionally omitted
+- Email transport: smtp
+- SMTP port: 465
+- SMTP secure mode: true
+- Explicit AUTH_PROVIDERS variable: not set
+- Explicit CORS variables: not set
+- Explicit cookie variables: not set
+- Explicit registration environment variables: not set
+
+## Persistent mounts
+
+- `/directus/extensions` is mounted from the host, mode `rw`
+- `/directus/uploads` is mounted from the host, mode `rw`
+
+## Notes
+
+- Secret values are intentionally excluded.
+- Registration behavior also depends on fields stored in the Directus settings table.
+- Role, policy, and permission exports are stored separately.
+- Flow option values are excluded because they may contain credentials, headers, addresses, or other sensitive configuration.