//! `macp-auth` — MACP authentication and the request security layer.
//!
//! Holds the [`security`] layer (caller-identity derivation, rate limiting, and
//! payload-size limits) and the pluggable auth [`auth`] resolver chain with its
//! static-bearer and JWT-bearer implementations. The heavier auth dependencies
//! (`jsonwebtoken`, `reqwest`) are confined to this crate so the kernel and
//! library consumers don't pull them in.