Authorization API

const authorizer: ExecutionAuthorizer = {
  async authorize({ jobId, stepId, capability, input, caller }) {
    return { decision: 'allow' };
    // or { decision: 'deny', reason: '...' }
  },
};