Identity as the Control Plane: Governing Access in the Age of AI