/**
 * @factory/auth — authentication primitives.
 *
 * Public surface:
 *  - tokens:    sign/verify HS256 JWTs (node:crypto), refresh rotation w/ family reuse detection
 *  - passwords: policy + hash/verify (PBKDF2 scaffold, bcrypt-swappable interface)
 *  - sessions:  server-side session registry (storage-agnostic)
 */
export * from "./tokens.js";
export * from "./passwords.js";
export * from "./sessions.js";