interceptor

Optional KRequestInterceptor for global response-side hooks (analytics, logging). Request-side mutations belong in authProvider.