authn-authz-review

Workflow to review authentication and authorization flows (sessions, tokens, RBAC/ABAC) and produce fix guidance.