Configure authentication and live-applier access

Status: Draft stub.

Limit access to server operations and identify authorized live appliers.

To complete: verify authentication settings, permission boundaries, refused requests, and credential replacement. Use placeholders and keep secrets outside designs and repositories.