SoulLink Product Shell

Product shell only uses this as a request target/bootstrap hint. Formal entitlement comes from server-side authenticated identity + durable projection. In production, capability reads/writes must come from the server-bound authenticated identity.