Control-plane module: SystemDirectory (cross-realm catalog + credential directory), realm catalog service, tenant-lifecycle and metering contracts. No JAX-RS resources live here (those belong to quantum-system-rest). See docs/design/CONTROL_PLANE_SPLIT_DESIGN.md.