End-to-end OCI security — IAM, compartments, dynamic groups, resource principals, OCI Vault/KMS, Cloud Guard, WAF, Security Zones, NSGs, VCN, logging, Data Safe, and agent identity via get_resource_principals_signer.