feat: add capability prescripts — LoggedCap (audit trail) and DualKeyCap (dual authorization)

Author: bordumb

crates/capsec-core/src/error.rs

@@ -29,4 +29,8 @@ pub enum CapSecError {
     /// The capability has expired (TTL elapsed).
     #[error("capability has expired")]
     Expired,
+
+    /// The capability requires multiple approvals, but not all have been granted.
+    #[error("capability requires dual-key approval, but approvals are insufficient")]
+    InsufficientApprovals,
 }

crates/capsec-core/src/lib.rs

@@ -44,6 +44,7 @@ pub mod cap;
 pub mod error;
 pub mod has;
 pub mod permission;
+pub mod prescript;
 pub mod root;
 pub mod runtime;