OptionalapiOptionalapiOptionalapiID of the MJ API key used for authentication (when using mj_sk_* format keys)
OptionalemailThe IdP's OIDC email_verified assertion from the verified JWT, when present.
Three-state: true (IdP vouched for the email), false (IdP explicitly says the email is
unverified — security-sensitive flows must not trust an email match), undefined (the IdP
omits the claim, or auth was via API key / magic link). Consumed by identity-claim
redemption; do not treat undefined as false.
Optionalis
SHA-256 hash of the MJ API key (used for scope authorization)