Block a user
feat(config): add tokenUrl, clientId, clientSecret to auth config
P3.6: Enforce JWT auth on X-Service adapter dispatch
feat(serviceadapter): enforce JWT auth on X-Service dispatch
P3.4: Inject X-Forwarded-User identity headers after JWT validation