fix(plugin-auth): pin the better-auth family to an exact 1.7.2, and gate the declared range against our own import surface

fix(plugin-auth): pin the better-auth family to an exact 1.7.2, and gate the declared range against our own import surface #2449