b647779521
Opens the store before NATS so the authenticator can consult IsAuthorized. Under --bus-auth enforce the embedded NATS gets the nkey authenticator (only allowlisted identities connect); --tls-cert/--tls-key make it present the server certificate and require TLS. External NATS manages its own auth/TLS. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>