Independent access-token validation

This protected resource accepts only a correctly signed, unexpired HBX access token issued for this exact resource and carrying the required scope.

HBX does not proxy or inspect the application data. The resource validates access independently through public OAuth metadata and JWKS.

Interop endpoint: /private-resource