Spark resource extension for explicit idempotency and one-time nonce protection.

A protected action must choose a strategy and a nonempty scope. Nonce protection has no stored-response or external-effect surface and always fails closed.