feat: add role authorization and prepare preview.2

[ling921]

Summary

• add native-compatible role groups to RemoteAuthorizeAttribute and generated ASP.NET Core endpoints
• preserve OR semantics within a role list and AND semantics across attributes
• expand the weather sample with query DTOs, headers, multiple HTTP methods, structured errors, and Interactive Auto client behavior
• refine the roadmap around contract compatibility, quality coverage, and richer HTTP contracts
• bump all public packages to 1.0.0-preview.2

Validation

• dotnet build Ling.RemoteServices.slnx --configuration Release --no-restore
• dotnet test Ling.RemoteServices.slnx --configuration Release --no-build
• sample HTTP smoke: 200 query, structured 400, and 404
• packed all three 1.0.0-preview.2 packages and symbol packages

Note

• Native AOT publishing could not run locally because the Visual Studio C++ linker workload is not installed; the regular Release build and all tests pass with zero warnings.