"""Identity bounded context — Users, roles, credentials, authentication rules.

Reference slice for the Clean Architecture refactor. The rules here are extracted
verbatim (behavior-preserving) from ``src/auth_api.py`` so the live monolith and the
layered version agree until each endpoint is cut over.
"""
