Complete the transport-neutral PKI session composition and expose all
currently implemented administration capabilities through typed direct
and batch operations.
Preserve explicit optional capabilities, KeyRef confinement, deterministic
lifecycle handling and reuse by the future persistent server.
Add a reusable PKI session and typed synchronous operation executor
shared by direct CLI commands and versioned sequential batch plans.
Provide deterministic references, structured output, failure policies and
safe lifecycle handling without introducing a scripting language or runtime.
