feat(pki-server): expose security control administration

Expose principals, scoped assignments, direct grants, approvals,
break-glass access, disclosure policy and one-time capabilities through
the unified administrative HTTPS operation gateway.

Preserve default-deny authorization, immutable PKI authority, PII
boundaries and uncertainty-aware secret delivery.

pki-server/src/main/java/zeroecho/pki/server/ServerRealmContext.java

@@ -96,7 +96,8 @@ public final class ServerRealmContext implements AutoCloseable {
         this.auditorViews = auditorViews;
         this.audit = new SafeAudit(clock, auditSink);
         this.gateway = new ServerOperationGateway(configuration.realmId(), configuration.authorityExposure(),
-                control, roles, authorization, approvals, breakGlass, new OperationSecurityDescriptors(),
+                control, roles, authorization, approvals, breakGlass, disclosure, auditorViews,
+                new OperationSecurityDescriptors(),
                 session.operations(), session.resourceScopes(), configuration.approvalPolicies(), clock, auditSink,
                 this::requireOpen);
     }