Generic identity (TUser/TRole), JWT auth for human users, API keys for non-human callers, feature flags.
Identity is generic over `` at the platform layer