Security Architecture (Secure by Design)Identity & AccessSession & Token (JWT/Opaque, refresh, rotation)Session & Token (JWT/Opaque, refresh, rotation) TBD