Interface SessionEligibilityPolicy

Functional Interface:
This is a functional interface and can therefore be used as the assignment target for a lambda expression or method reference.
@FunctionalInterface public interface SessionEligibilityPolicy

Refresh Session 的應用政策重新驗證 hook。

框架先完成 credential、subject、actor 狀態與綁定有效期／必要權限檢查，再呼叫本 hook。 回傳拒絕會撤銷整個 family 並 blacklist 目前 access family；基礎設施例外原樣傳播，且不消耗 refresh credential，避免把目錄或政策服務故障偽裝成憑證失效。