docs: add ANS and Web Bot Auth to the capability map

[fraseragain]

What changed

• Adds Agent Name Service (ANS, draft-narajala-courtney-ansv2-01) and Web Bot Auth (draft-ietf-webbotauth-httpsig-protocol-00) to the capability map generator, both images and protocol-stack-2026-10.md.
• Four new capabilities: domain-anchored agent naming, identity assurance tiers, signing key directory, append-only transparency log. Counts are now 37 capabilities: 6 overlap, 10 partial, 2 gaps, 19 single owner.
• Matrix gains ANS and Web Bot Auth columns, with reading notes on what each does and does not cover.
• Rebased onto main after Add PAP (provisional) and UCP to the protocol capability map #10 (PAP and UCP); generator conflicts resolved by reapplying the edits.

Why

Both protocols sit in the identity, discovery and request-proof layers and were missing from the map.

Edge cases

• Ratings come from the full drafts via section-by-section summaries, not a line-by-line read.
• ANS is an independent Informational submission shown as expired and archived. Web Bot Auth is a working-group draft.
• Composed sequence diagram deliberately unchanged.

How to test

python3 docs/research/tools/capability-map/generate.py out.html and with --no-cheqd; both run and print the counts above (the second drops the cheqd chips and Trust anchor row).

Risks

Docs only. Ratings are an assessment and may need revisiting as the drafts change.

🤖 Generated with Claude Code

[github-actions]

Super-linter summary

Language	Validation result
GITHUB_ACTIONS	Pass ✅
MARKDOWN	Pass ✅
YAML	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter