Default security runtime: authorization engine, action registry, in-memory policy resolvers, security event emitter, and Dagger modules