Drop chain= and cache_token= parameters. Hook now mirrors the style of
lucente_observability.request_id_hook: a sync closure that calls
create_technical_auth_header on every invocation and writes the result
into kwargs["headers"]["Authorization"]. Composition with other hooks
is the caller's concern.