AbstractCore v2.24.0

Added

• Hosting applications can compose the Core ASGI server with a request-scoped
  ServerAuthPolicy and use_server_auth_policy() context manager. Host tokens
  stay separate from standalone server credentials; policies remain isolated
  across concurrent requests and restore after errors. Optional unauthenticated
  access preserves restrictions on server-held provider credentials.

Fixed

• Prompted tool-call parsing exposes structured tool_call_error diagnostics for
  rejected calls; streaming malformed envelopes expose the same diagnostic so
  agents can recover.