How identity governance became the apex control plane — the strategic case for identity-first enterprise security.