"""Application layer — use cases that orchestrate domain objects via ports.

Depends on ``domain`` + ``shared_kernel`` only. Knows nothing about FastAPI,
SQLAlchemy, JWT, or argon2 — those arrive as ``ports`` (Protocols) injected by the
composition root. A use case is one business operation, testable with fakes.
"""