config: set memory to public (no JWT required), only iam protected

- sqs, s3, memory: public APIs (auth not required)
- memory: uses static API key internally, no JWT validation needed
- iam: protected by JWT validation + iam:admin capability check
- revoked tokens detected via JWKS key rotation (15min cache TTL)

k8s/configmap.yaml

@@ -71,8 +71,7 @@ data:
         url: http://poimen-memory.poimen.svc.cluster.local:8080
         timeoutSeconds: 30
       auth:
-        required: true
-        capability: "memory:read"
+        required: false
       resources:
       - name: query
         methods: