…actices)

Implements caching, conditional retry with exponential backoff and jitter, and per-endpoint circuit breakers with stale-cache fallback, as described in the Rate Limit Best Practices guide.

All endpoints obtain the AuthleteApi client through a dynamic proxy wrapper; behavior is tunable via resilience.properties and can be disabled entirely with resilience.enabled=false.

Remove redundant RateLimit-Reset header variant and drop DPoP/message-signature-only
params from the introspection cache key.

feat: migrate to Jakarta EE 10, Java 25 and Jetty 12

Best-effort local eviction: a successful revocation drops all
cached introspection entries for that token via prefix match. Other
instances remain bounded by the short TTL. Includes e2e tests through
the resilient proxy.

…limit-resilience

Co-authored-by: Cursor <cursoragent@cursor.com>

# Conflicts:
#	pom.xml
#	src/main/java/com/authlete/jaxrs/server/api/AuthorizationDecisionEndpoint.java
#	src/main/java/com/authlete/jaxrs/server/api/AuthorizationEndpoint.java
#	src/main/java/com/authlete/jaxrs/server/api/FederationConfigurationEndpoint.java
#	src/main/java/com/authlete/jaxrs/server/api/FederationRegistrationEndpoint.java
#	src/main/java/com/authlete/jaxrs/server/api/GrantManagementEndpoint.java
#	src/main/java/com/authlete/jaxrs/server/api/IntrospectionEndpoint.java
#	src/main/java/com/authlete/jaxrs/server/api/JwksEndpoint.java
#	src/main/java/com/authlete/jaxrs/server/api/PushedAuthReqEndpoint.java
#	src/main/java/com/authlete/jaxrs/server/api/RevocationEndpoint.java
#	src/main/java/com/authlete/jaxrs/server/api/UserInfoEndpoint.java
#	src/main/java/com/authlete/jaxrs/server/api/backchannel/BackchannelAuthenticationCallbackEndpoint.java
#	src/main/java/com/authlete/jaxrs/server/api/backchannel/BackchannelAuthenticationEndpoint.java
#	src/main/java/com/authlete/jaxrs/server/api/device/DeviceAuthorizationEndpoint.java
#	src/main/java/com/authlete/jaxrs/server/api/device/DeviceCompleteEndpoint.java
#	src/main/java/com/authlete/jaxrs/server/api/vci/CredentialOfferEndpoint.java

feat: add resilience layer for Authlete API calls (rate limit best practices)

chore: update TLS version used in CIBA notifications to TLS 1.3