Configure Broker Authorization Policy

Goal

Configure the broker's builtin-auth Layer with deny-by-default TOML rules and rotate those rules without weakening listener authentication.

Recipe

1. Read the authorization policy guide and the broker auth Layer configuration.

2. Configure an authenticated listener and its policy:

   [listener.auth]
   kind = "builtin-auth"