fn registry() -> &'static RwLock<HashMap<u64, Arc<UpstreamTls>>>
Process-wide identity registry, so code that only sees JSON context values (the WebSocket relay) can resolve an identity from its cache key.