fix(security): pass the stack's declared capabilities at every audience-anchor predicate consumer

fix(security): pass the stack's declared capabilities at every audience-anchor predicate consumer #10933