Align IAM Profile consumption with v0.2

examples/claims/key-cape-lightweight.yaml

@@ -2,8 +2,8 @@
 # authenticated human user. Profile-conformant minimum: required claims
 # only, single audience, simple roles list, OIDC standard amr values.
 #
-# Reference: docs/iam-profile-consumption.md, NetKingdom IAM Profile v0.1
-# §"Required Claims" and §"Local Development Profile".
+# Reference: docs/iam-profile-consumption.md, NetKingdom IAM Profile v0.2
+# "Core Claims" and "Local Development Profile".
 
 iss: https://idp.netkingdom.local/keycape
 sub: user-7f9e2b
@@ -11,6 +11,8 @@ aud:
   - flex-auth
 exp: 4102444800  # 2100-01-01, kept far-future for stable fixtures
 iat: 1767225600  # 2026-01-01
+tenant: tenant:platform
+principal_type: human
 preferred_username: ada
 email: ada@netkingdom.local
 name: Ada Lovelace
@@ -22,3 +24,10 @@ amr:
 acr: "1"
 groups:
   - /markitect/readers
+assurance:
+  level: aal1
+  methods:
+    - pwd
+  mfa: false
+  source: key-cape
+  at: 1767225600