Provider integrations for using Typesec behind OAuth/OIDC systems.
This crate keeps external identity and authorization services at the edge of
the system while preserving the core Typesec invariant: provider decisions
become typed capabilities only through [typesec_core::mint_capability].