Session-scoped JWT minting and the validated-claims wrapper produced by crate::auth::AuthValidationService.
crate::auth::AuthValidationService