Documented JWT/JWKS config and added JWKS positive-path + fallback tests (PyJWKClient stub). Tracking for release notes and downstream consumers.