Expose current VM receiver identities and permissions
Closed
TE
4h ago+1929+1929+0123456789012345678901234567890123456789-48-48-01234567890123456789
Add an owned VM/mesh read for current client identities and incoming service permissions. It excludes transport rules and caps the policy lease at 30 seconds or owner expiry. CloudDO grant joins and listener activation remain follow-ups.
Hosted checks pass: 794 Worker and 127 Node/store tests, plus generated Rust/TypeScript clients.
Changelog
Added: VM receiver policy read.