fix(devx): re-point authorization.mdx's ADR-0094 D5 cite to ADR-0066 D1

ADR-0094 D5 is RETIRED and never discussed capability declaration or
managed_by-guessing back-doors in the first place; the claim being made
("retire the implicit managed_by-guessing back-doors in favour of
explicit, attributable declarations") is ADR-0066 D1's own direction.

Part of #8386

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Jqe56GnYFddggeAyfkZFVz

Author: claude

content/docs/permissions/authorization.mdx

@@ -187,7 +187,7 @@ in `systemPermissions[]`. That derivation still runs for back-compat (a
 reference with no declaration keeps resolving as a `managed_by:'platform'`
 placeholder), but an explicit `defineCapability` takes precedence and — for a
 pre-existing derived placeholder — **claims** it, upgrading the row to package
-provenance with the authored label/description/scope. This is the ADR-0094 D5
+provenance with the authored label/description/scope. This is the ADR-0066 D1
 direction: retire the implicit `managed_by`-guessing back-doors in favour of
 explicit, attributable declarations.