Security & Identity Layer (Cross-Cutting)
mTLS (where required)