What security features does Catalyst add for durable execution beyond what Dapr provides?

Catalyst extends Dapr's security with workload identity (SPIFFE/SPIRE), MCP tool authorization and policy enforcement, and verifiable execution with audit trails. Dapr provides mTLS, secrets management, and access control policies, but Catalyst adds agent-specific security: you can define policies for which tools agents can call and under what conditions. This is critical for production AI agents where tool misuse is a risk. Temporal and Restate lack these agent-specific security controls.