Function require_authn 

pub fn require_authn(
    requirement: Option<&AuthnRequirement>,
    ctx: &CratestackContext,
) -> Result<(), CratestackError>

Ok when there is no requirement or ctx meets it now, otherwise the step-up refusal. The generated code calls it with the operation’s AUTHN, None for an operation without one.