[codex] docs: require plural auth resources

[gandalf-at-lerian]

What changed

• Require authorization resource names to be plural and match the REST collection route.
• Update Ring examples from resource to resources where the route is /v1/resources.
• Teach the production-readiness route organization audit to flag singular authorization resources on collection routes.

Exception rule

Singular authorization resources are allowed only for protected singleton or capability endpoints that are not modeled as REST collections. Any exception must be documented next to the route registration and called out in the PR.

Why

plugin-br-payments exposed the gap: routes use plural collections, but RBAC resources can drift to singular names like payment or boleto, creating mismatches with Access Manager grants.

Validation

• git diff --check
• rg check for singular placeholder examples in the touched Ring docs

Requested by: @alexgarzao

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 1d35f2b2-5630-47d2-a891-91a0cb0ac346

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}