nucleus-identity-projection 0.1.0

Identity projection lifter for the Nucleus substrate. Lifts a JWT-SVID (SPIFFE 2.0) into a Projection::Identity body that the substrate Receipt envelope can carry. Verifier path validates the SVID against a published JWKS — fully offline once the JWKS is fetched.