feat: Events API, bulk refresh token revocation, Online RT ephemeral sessions

[fern-api]

Summary

Fern SDK regeneration bringing new API endpoints, types, and properties across the Management API.

Changes

• New: Events API - subscribe to CloudEvent streams for user, group, and organization lifecycle events ($client->events->subscribe())
• New: Bulk refresh token revocation - revoke tokens by ID list, user, user+client, or client ($client->refreshTokens->revoke())
• New: Directory Provisioning synchronized groups - list and replace synchronized groups for a connection
• New: Online Refresh Token ephemeral sessions - added allow_online_access_with_ephemeral_sessions property to Resource Servers
• Client Grants - added default_for filter parameter
• Clients - added myOrganizationConfiguration, redirectionPolicy, sessionTransferDelegation, thirdPartySecurityMode properties
• Branding - added phone display settings (formatting, masking) and identifiers
• Connections - added SAML assertion decryption settings, OIDC JWT audience format
• Resource Servers - added authorizationPolicy property
• Tenant Settings - added dynamic client registration security mode
• LogStreams - improved PHPDoc formatting (HTML to Markdown)
• Error types - added standardized BadRequestSchema, ForbiddenSchema, UnauthorizedSchema, TooManyRequestsSchema
• PHPStan baseline - added ignore for generated EventStream type error