Parsed request body.
Matched contract metadata and schemas.
Current route handler context.
Hook-owned request headers.
When the auth hooks declare a headers schema, this is that schema's
output parsed from the raw lowercase request header record. Without a
schema it is the raw lowercase header record itself, so auth resolution
never depends on each route's contract header schema.
Parsed path parameters.
Parsed query parameters.
Framework-neutral request.
Arguments passed to auth route-hook callbacks.