Principal

Moved to kuilt-core (us.tractat.kuilt.core.Principal) so fabric-level admission (LinkAdmission on the hosted-hub path) can consume it without depending on kuilt-session. This alias keeps existing kuilt-session consumers source-compatible.