贴标申请，仓储转运

common-security/src/main/java/com/baiyue/common/security/JwksJwtDecoderAutoConfiguration.java

@@ -20,6 +20,7 @@ public class JwksJwtDecoderAutoConfiguration {
     JwtDecoder jwksJwtDecoder(@Value("${baiyue.security.jwk-set-uri:${JWT_JWKS_URI:http://auth-service:9100/api/auth/.well-known/jwks.json}}") String uri,
                               @Value("${baiyue.security.issuer:auth-service}") String issuer,
                               @Value("${baiyue.security.audience:lastleg-api}") String audience) {
+        // Fetch and cache JWKS on token verification, so startup does not depend on Auth availability.
         NimbusJwtDecoder decoder = NimbusJwtDecoder.withJwkSetUri(uri)
             .jwsAlgorithm(SignatureAlgorithm.RS256).build();
         decoder.setJwtValidator(new DelegatingOAuth2TokenValidator<>(