Fix loadIdentifier called after loadAuthenticator losing resolver con…

…fig (#755)

* Fix loadIdentifier called after loadAuthenticator losing resolver config

When loadAuthenticator() was called before loadIdentifier(), the
authenticator would receive an empty IdentifierCollection and create
its own default Password identifier immediately in the constructor.
Later calls to loadIdentifier() would add to the service's identifier
collection, but the authenticator already had its own separate
collection with the default identifier.

This fix changes the default identifier loading from eager (in
constructor) to lazy (in authenticate()). This ensures that if
loadIdentifier() is called after loadAuthenticator(), the identifier
will be loaded into the shared collection before the authenticator
tries to use it.

Fixes #754

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* Fix CS.

---------

Co-authored-by: Claude <noreply@anthropic.com>

Merge pull request #744 from cakephp/redirect-url-query-param

Set the redirect query param only for GET requests.

Merge pull request #732 from cakephp/3.x-array-doc

Fix up array docblocks.

Merge pull request #731 from cakephp/login-url-mismatch

Fix error message generation when using multiple array login URLs.

Merge branch '3.x' into 3.next

Merge pull request #722 from joaopatrocinio/patch-1

Error: Supplied key param cannot be coerced into a public key

Merge pull request #718 from cakephp/cookie-fix

Alert about wrong configuration.

Merge pull request #713 from cakephp/3.x-cleanup

Add PHP min version for user and IDE.

Merge pull request #697 from cakephp/fix-cs

Update to latest codesniffer rules

Merge pull request #680 from cakephp/ADmad-patch-1

Cleanup release archives