task(docs): refresh kongctl documentation for v1.14 - #7039

Summary

• Refresh the kongctl conceptual and resource documentation for capabilities through the upcoming v1.14 release.
• Add complete sync-scope safety guidance, AI Gateway GA resource coverage, audit-log pull and follow workflows, token lifecycle commands, output controls, templates, lookup and secret behavior, and current dump behavior.
• Add an end-to-end AI Gateway OpenAI quickstart and improve landing-page, command-page, and Konnect discoverability.
• Correct works_on metadata for Konnect-only commands without editing generated CLI help.

Release gating

This draft targets publication after kongctl v1.14.0.

• task(aigateway): promote AI Gateway resources to GA kongctl#1742 merged, promoting all AI Gateway resources to GA.
• Publish kongctl v1.14.0.
• Run the normal stable-release CLI help and version metadata sync. Generated files under app/_includes/kongctl/help/ are intentionally unchanged here.
• Rebase on release(ai-gateway): AI Gateway 2.0 #5385 and reconcile the overlapping AI Gateway 2.0 content.
• Verify the examples against the stable v1.14 binary.

Keep this PR in draft until the remaining release dependencies are complete.

Validation

• make validate-frontmatters
• Vale on every changed Markdown and landing-page file: 0 errors, warnings, or suggestions
• Vale on extracted Markdown frontmatter: 0 errors, warnings, or suggestions
• git diff --check

A full local site build could not run on this host. The pinned Ruby 3.4.4 native dependencies google-protobuf and liquid-c fail to compile against the installed C toolchain because the Ruby headers do not provide the expected bool definitions. This is an environment dependency failure; the PR should still receive the normal CI build and link checks.

Closes Kong/kongctl#1998