v0.2.0
Change FilterIdentities to accept an explicit Store instead of opening the
platform-default store internally. Callers now control backend configuration
and store lifetime.
Add reusable TLS client-certificate sources, configurable Windows store
locations, shared example configuration, and updated lifecycle documentation.
BREAKING CHANGE: FilterIdentities now requires an open Store argument. Callers
must call Open, pass the returned Store to FilterIdentities, and close the Store
when finished.