P0: Trusted server layer (core-api) + entitlement guard

Imported from GitHub issue El-SaMa/oma#12 by @El-SaMa.

Stand up the trusted server boundary; all sensitive mutations pass an entitlement check before executing.

Done when: a sample mutation is rejected without entitlement and allowed with it.