Improved cloud security reconnaissance guidance

Updated GCP and Auth0 reconnaissance documentation to use curl instead of gsutil for anonymous checks (avoiding false positives from ambient credentials) and clarified that Auth0 userinfo endpoint requires a bearer access token. These changes make the security testing guidance more accurate and reliable.