Define and test a cross-contract authorization context for nested calls #1794

Problem

Nested calls currently rely on independently reconstructed authorization information, which makes cross-contract permission checks difficult to audit.

Scope

Define a compact authorization context for nested contract calls, including caller, original actor, scope, and replay information. Propagate it consistently through the facade and adapters.

Acceptance criteria

• Nested calls cannot replace the original actor without an explicit authorized transition.
• Context fields are validated and bounded.
• Cross-contract tests cover allowed and denied call chains.

Validation

Add security tests for forged, missing, and mismatched contexts.