identity: service facade api.sx — login/verify/revoke/logout (10 tests, Phase 1 complete)

identity:start() spawns one coordinator owning the token table + session
registry and exposes the whole-domain ops. The coordinator is the owner
sessions notify on idle timeout, so an expired session deregisters itself
— timeout-driven, never swept. verify/2 answers identity only ({active,
Subject, Client, Scope}); permission is delegated to acl. 39/39.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

lib/identity/scoreboard.json

@@ -1,10 +1,11 @@
 {
   "language": "identity",
-  "total_pass": 29,
-  "total": 29,
+  "total_pass": 39,
+  "total": 39,
   "suites": [
     {"name":"session","pass":11,"total":11,"status":"ok"},
     {"name":"token","pass":9,"total":9,"status":"ok"},
-    {"name":"registry","pass":9,"total":9,"status":"ok"}
+    {"name":"registry","pass":9,"total":9,"status":"ok"},
+    {"name":"api","pass":10,"total":10,"status":"ok"}
   ]
 }