Module guard 

Deploy authorization guard shared by both transports. Adapter-boundary deploy authorization.

Deploy is not a data operation: loading a package registers code into the shared BEAM VM and re-points routing for a workflow type that is startable from every namespace. Namespace grants therefore authorize the wrong thing — the deploy grant is deployment-wide, carried by the deploy token claim (or the x-aion-deploy development header), and this guard decides it before any handler logic runs.

Structs

DeployGuard

Adapter-boundary guard for the operator deploy API, the sibling of crate::namespace::NamespaceGuard for engine-global operations.