Release v4.37.0

Added

• Screenplay csharp and file policies render as Arc authorization when their body passes Stage's pure-code checks. The body sees the caller (authentication, roles and claims, with roles kept separate from claims), the command identifier or query key, and the time Arc received the command or query as PolicyContext.Occurred. Opaque and portable policies compose in authored order, and an authorization that reaches an opaque policy without a receipt time or subject denies. Bodies that read the tenant, the untyped artifact or identity names are refused with STAGE-ESM-015. (part of #57)