Auth-aware actor extraction for authored HTTP Endpoint providers.
This crate owns ingress authentication glue only. Extracted actors identify evidence accepted by the bound Auth Module; target Modules must still verify the attached assertion and make the final business authorization decision.