It is deliberately {@code java.base}-light - its only dependency beyond
{@code java.base} is the equally minimal {@code build.jenesis.repository.store} SPI (for {@code Features} and
{@code ArtifactStore}, which {@code Authorization} reads its grants through) - so it carries no Spring, Tomcat,
Micrometer or Jackson, exactly the "SPI contract modules stay java.base-light; the heavy deps ride the impl/bundle"
rule (§2).
<p>It holds the credential model ({@code Authorization}) and the ...
