[esitarz]

Summary

• customRoles is now a property of the options object on Auth.Login, Auth.ElevatedLogin, Auth.ClientCredentials, and Auth.Anonymous, alongside cancelToken, requestType, and (Anonymous) anonuserid.
• Custom roles with no standard roles are sent as the scope string. That case previously sent the literal text undefined.
• This ships in 14.0.0. package.json stays at 13.0.0 here, and the changelog note stays under Unreleased. The 14.0.0 release PR is the one that sets the version, moves this note under # [14.0.0], and publishes on merge. Calls that omit customRoles are unchanged.

Refs #81

Test plan

• Auth tests pass for standard roles, custom roles, both, and neither on all four methods
• Custom-roles-only token body is scope=InventoryAdmin, with no undefined prefix
• customRoles and anonuserid are absent from the axios config, and requestType is still passed through