chore: add changesets, update API reports, fix type errors

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>

plugins/auth-node/src/oauth/createOAuthRouteHandlers.test.ts

@@ -1265,7 +1265,7 @@ describe('createOAuthRouteHandlers', () => {
     });
 
     it('should return logoutUrl as JSON when authenticator provides one', async () => {
-      mockAuthenticator.logout.mockResolvedValueOnce({
+      (mockAuthenticator.logout as jest.Mock).mockResolvedValueOnce({
         logoutUrl: 'https://example.auth0.com/v2/logout?federated',
       });
 
@@ -1293,7 +1293,7 @@ describe('createOAuthRouteHandlers', () => {
     });
 
     it('should return empty body when authenticator logout returns void', async () => {
-      mockAuthenticator.logout.mockResolvedValueOnce(undefined);
+      (mockAuthenticator.logout as jest.Mock).mockResolvedValueOnce(undefined);
 
       const agent = request.agent(
         wrapInApp(createOAuthRouteHandlers(baseConfig)),

plugins/auth-node/src/oauth/createOAuthRouteHandlers.ts

@@ -280,7 +280,7 @@ export function createOAuthRouteHandlers<TProfile>(
         throw new AuthenticationError('Invalid X-Requested-With header');
       }
 
-      let logoutResult: void | { logoutUrl?: string };
+      let logoutResult: void | { logoutUrl?: string } = undefined;
       if (authenticator.logout) {
         const refreshToken = cookieManager.getRefreshToken(req);
         logoutResult = await authenticator.logout(