auth: update generated types for targetAccount option

Regenerate lib/IAMClient.d.ts via `yarn gen-types` so the
verifySignatureV2/V4 option types include the new optional
`targetAccount` field, and add the corresponding JSDoc entry on V2.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: tmacro

lib/IAMClient.d.ts

@@ -258,6 +258,9 @@ declare class VaultClient {
      * @param {string} [options.securityToken] - Token for temporary credentials
      * authorization against IAM policies. This is a stringified version of a
      * RequestContext class.  See Arsenal for class details.
+     * @param {string} [options.targetAccount] - canonical id of the account
+     *                             that owns the resource being targeted by
+     *                             the request (e.g. the bucket owner)
      * @param {VaultClient~requestCallback} callback - callback
      * @returns {undefined}
      */
@@ -266,6 +269,7 @@ declare class VaultClient {
         reqUid?: string;
         requestContext?: string;
         securityToken?: string;
+        targetAccount?: string;
     }, callback: any): undefined;
     /**
      * Verify AWS request signature using V4 auth (contrary to v2, hash is
@@ -285,6 +289,9 @@ declare class VaultClient {
      * @param {string} [options.securityToken] - Token for temporary credentials
      * authorization against IAM policies. This is a stringified version of a
      * RequestContext class.  See Arsenal for class details.
+     * @param {string} [options.targetAccount] - canonical id of the account
+     *                             that owns the resource being targeted by
+     *                             the request (e.g. the bucket owner)
      * @param {VaultClient~requestCallback} callback - callback
      * @returns {undefined}
      */
@@ -293,6 +300,7 @@ declare class VaultClient {
         get?: string;
         requestContext?: string;
         securityToken?: string;
+        targetAccount?: string;
     }, callback: any): undefined;
     /**
      * A getter for Account email addresses provided a dictionary of canonical

lib/IAMClient.d.ts.map

@@ -795,6 +795,9 @@ class VaultClient {
      * @param {string} [options.securityToken] - Token for temporary credentials
      * authorization against IAM policies. This is a stringified version of a
      * RequestContext class.  See Arsenal for class details.
+     * @param {string} [options.targetAccount] - canonical id of the account
+     *                             that owns the resource being targeted by
+     *                             the request (e.g. the bucket owner)
      * @param {VaultClient~requestCallback} callback - callback
      * @returns {undefined}
      */