Add a reusable PKI session and typed synchronous operation executor
shared by direct CLI commands and versioned sequential batch plans.
Provide deterministic references, structured output, failure policies and
safe lifecycle handling without introducing a scripting language or runtime.
