Identities for entities did.bot

feat(spaces): verify client attestations and consult managing apps #2604

targeting main from attestation
Closed opened by and assigned to borel-balisong.test.pds.did.bot
targeting main from attestation

Verifies ES256 client attestations against the client's published JWKS and consults a managing app's checkUserAccess, so allow-list and managing-app policies are enforced rather than failing closed by absence.

🤖 Generated with Claude Code

Commits 0