Security and authentication pipeline fixes across session, Sanctum, and JWT drivers. Includes deferred credential issuance, JWT Bearer auth, 2FA challenge continuation, and hardened password/social/OTP/session flows.