Align IAM Profile consumption with v0.2

examples/claims/service-account.yaml

@@ -3,8 +3,7 @@
 # operation it performs. No preferred_username (service identities are
 # named after the service and environment per the profile).
 #
-# Reference: NetKingdom IAM Profile v0.1 §"Service Account Flow" and
-# §"Hub-to-Hub Service Account Pattern".
+# Reference: NetKingdom IAM Profile v0.2 "Service Account Flow".
 
 iss: https://sso.netkingdom.example/realms/netkingdom
 sub: svc-markitect-tool-prod
@@ -12,9 +11,19 @@ aud:
   - flex-auth
 exp: 4102444800
 iat: 1767225600
+tenant: tenant:platform
+principal_type: service
 azp: svc-markitect-tool-prod
 client_id: svc-markitect-tool-prod
 scope: hub:read hub:capability
 roles:
   - service
   - operator
+groups: []
+assurance:
+  level: aal1
+  methods:
+    - client_secret
+  mfa: false
+  source: keycloak
+  at: 1767225600