Single mediation point for token install/replace/revalidate. Audits under AuditCategory.LICENSE, persists to PG, mutates the LicenseGate, and publishes LicenseChangedEvent so downstream listeners (RetentionPolicyApplier, LicenseMetrics) react uniformly. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>