AUTH-009: Auth Upgrade Command (Future)

**Priority:** Low | **Estimate:** L

> **Note:** Can be done later, not blocking initial release

Add `aegis upgrade auth --to rbac|org` command for existing projects.

## Acceptance Criteria
- [ ] Command generates incremental migration
- [ ] Adds missing service/model files
- [ ] Updates existing files with new conditionals