Add four marquee examples + e2e CI against goja-enabled OSS gateway

[sedkis]

Summary

• Adds one marquee example for each remaining hook type (auth_check, post_key_auth, post, response); the previous repo had only pre. Four of five examples were AI-authored from the public docs (AGENTS.md + types.d.ts + JWS) — the fifth was promoted from the live AI-generation experiment.
• Adds an end-to-end CI scaffold at `e2e/` that runs every example against a real Tyk gateway in Docker. Five `tests/*.sh` scripts exercise the gateway with curl + assert plugin behaviour on the wire (signature presence, 401/200 dispatch, redaction, header propagation, key-driven session metadata).
• Closes type and doc gaps the AI generation loop surfaced: `ReturnAuthData` accepts `Partial` (no more `as any`), AGENTS.md hook table now lists the right return helper / manifest shape / `require_session` per hook, and a Web Crypto shim section documents the `crypto.getRandomValues` workaround for libs like `uuid`.

Test plan

• Local `npm test` for each of the five examples (3+5+5+6+6+6 tests, all green)
• Local `npx tsc --noEmit` clean across starter + every example
• Local `npm run build:bundle` produces a valid checksummed `bundle.zip` for each example
• Local `bash e2e/run.sh` — 5/5 plugins load via `prefix=jsvm-goja` and pass their assertions (target: ~5–10 min on first run because the gateway image is built; ~30 s on warm runs)
• GitHub Actions `test.yml` — matrix runs unit + bundle-build for all five examples
• GitHub Actions `e2e.yml` — clones the goja branch (`TT-16948-...goja`) on `TykTechnologies/tyk`, builds the gateway image, runs the e2e suite. May need a `TYK_GW_TOKEN` repo secret if the goja branch is in a private repo and the default `GITHUB_TOKEN` can't read it.

Notes for reviewers

• The published Tyk OSS image (v5.7) ships otto, not goja, so it can't run plugins that use `globalThis` or un-down-transpiled ES2015+ from npm deps. The e2e overlay (`e2e/gateway.Dockerfile` + `build-gateway-image.sh`) cross-compiles the goja branch and lays it on top of v5.7. Once goja merges to main and a public image with `driver: "javascript"` ships, delete the overlay and switch `docker-compose.yml` to use the public tag directly.
• Two non-obvious gateway behaviours documented while wiring this: (1) `auth_check` requires `enable_coprocess_auth: true` on the API def, otherwise built-in AuthKey rejects pre-plugin; (2) `auth_check` is a singular manifest object, not an array — every other hook is an array.

🤖 Generated with Claude Code