[DOCS] Expand owner-scoping guidance in API authentication docs

[utksh1]

Summary

The auth docs should explain owner-scoped resources and why tests must cover cross-owner access failures.

Problem

The current documentation is either missing a critical explanation, outdated, or fragmented across too many places.

Where to update

• Suggested files: docs/api-authentication.md, docs/API.md
• Related sections or headings: the sections implied by the title and summary

Expected outcome

A contributor should be able to complete this update with a focused documentation PR and leave the surrounding docs easier to follow.

Acceptance criteria

• The affected docs are updated
• Steps, commands, and references are accurate
• Cross-links are added where they reduce ambiguity
• A maintainer can follow the updated guidance without extra clarification

Verification

Review the changed docs against the current code paths or scripts they describe and spot-check any commands or file references.

Additional context

Prefer precise edits over broad rewrites unless the referenced section is already structurally broken.

[Subramaniyajothi6]

@utksh1 can u assign this task to me under gssoc

[tmdeveloper007]

This issue has been open for an extended period with no linked pull request and no recent activity. Suggesting closure to keep the issue tracker focused. Please feel free to reopen if you are actively working on this.