v1.0.3

fix(auth): use placeholder AppID/AppSecret for env token mode

The Lark SDK validates AppID and AppSecret are non-empty even when a
UserAccessToken is provided directly (via LARK_ACCESS_TOKEN env var).
Since AppID/AppSecret are only used for bot (tenant) token acquisition,
which is never triggered in user-token injection mode, we use a
placeholder value to pass the SDK validation.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>