Add Authority Ops hackathon application + red-team hardening

[prayingperceptions]

Adds Authority Ops under hackathon/authority-ops as a separate application for the Agents for Humans Hackathon.

What this submission demonstrates:

• Strands Agents TypeScript + Amazon Bedrock live path
• Explicit Agent Authority integration: Passport, Contract, Gate, Authority Score
• Bounded payment authority: $500 ALLOW, $501–$1,000 ASK, >$1,000 DENY
• Human approval path for review-tier payments
• Evidence chain separating request, evidence, proposal, authorization, approval, execution attempt, destination, and outcome
• Browser presentation UI plus deterministic CLI demo
• Red-team hardening so invoice amount, vendor, currency, invoice ID, and payment destination are derived from trusted application state rather than agent-supplied transaction fields
• Regression tests for identity, authority limits, trusted invoice binding, destination substitution, and action-digest integrity

Hackathon disclosure: the application is new work built for the submission period. It uses the existing open-source Agent Authority project as an authority-layer integration; the invoice workflow, Strands agent/tool integration, scenario data, UI, and evidence-flow implementation are the new application work.

The payment flow is simulated. This is a hackathon reference application, not a production payment system or hardened sandbox.