Noves-Inc/canton-data-app: docs/security.md

Security model Identities Use two distinct OIDC clients and keep the provisioning administrator separate from both: Identity Purpose Matching Canton user Public browser client and human account Interactive sign-in. The browser access token is forwarded to the selected participant. The token's…