0.10.1: 安全与业务逻辑加固、新品牌与部署加固

三轮审查修复(60+ 项),相对远端 main(b536672)的关键变更:
- 安全: 数据面 SSRF 拨号防护(防 DNS rebinding)/上游凭据剥离/登录防枚举
  与锁定态统一/可信代理(X-Forwarded-For)限流加固/会话版本失效机制/
  撤销即时传播/弱密钥拒绝启动/脱敏字节级重写(保签名契约)
- 业务逻辑: 裸 body 上传 panic/bootstrap 审计管线卡死/定价通配符优先级/
  全局工具可见性/调度器停机补跑/TOTP 挑战令牌消费顺序/熔断探针语义/
  >4MB 响应 token 计量/管理员重置密码作废会话 等
- 前端: 新 logo(语枢 AI 网关主题)/Provider 凭据异常警示/删除入口/
  后端错误消息透传/localStorage 敏感数据收敛
- 部署: CREDENTIAL_MASTER_KEY 持久化与弱值拒绝/Provider DELETE 接口/
  nginx 安全头/worker 内存限制
- 新增迁移 000029(key_hash 索引)/000030(usage_daily 币种维度)

internal/identity/oidc.go

@@ -471,6 +471,51 @@ func newOIDCHTTPClient(allowPrivate bool) *http.Client {
 	}
 }
 
+// jwksCacheTTL 是 JWKS 缓存有效期,以 IdP 最短键轮换周期为界。
+const jwksCacheTTL = 5 * time.Minute
+
+type jwksKey struct{ Kid, Kty, N, E string }
+
+type jwksDocument struct {
+	Keys []jwksKey
+}
+
+type jwksCacheEntry struct {
+	doc     jwksDocument
+	fetched time.Time
+}
+
+// jwksFor 返回 IdP 的 JWKS,带数分钟缓存(provider 数量有限,map 无需淘汰)。
+func (s *Service) jwksFor(ctx context.Context, jwksURI string) (jwksDocument, error) {
+	s.jwksMu.Lock()
+	if s.jwks == nil {
+		s.jwks = make(map[string]jwksCacheEntry)
+	}
+	if entry, ok := s.jwks[jwksURI]; ok && time.Since(entry.fetched) < jwksCacheTTL {
+		s.jwksMu.Unlock()
+		return entry.doc, nil
+	}
+	s.jwksMu.Unlock()
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, jwksURI, nil)
+	if err != nil {
+		return jwksDocument{}, err
+	}
+	response, err := s.oidcHTTPClient().Do(req)
+	if err != nil {
+		return jwksDocument{}, err
+	}
+	defer response.Body.Close()
+	payload, _ := io.ReadAll(io.LimitReader(response.Body, oidcMaxResponse+1))
+	var doc jwksDocument
+	if response.StatusCode/100 != 2 || len(payload) > oidcMaxResponse || json.Unmarshal(payload, &doc) != nil {
+		return jwksDocument{}, errors.New("jwks")
+	}
+	s.jwksMu.Lock()
+	s.jwks[jwksURI] = jwksCacheEntry{doc: doc, fetched: time.Now()}
+	s.jwksMu.Unlock()
+	return doc, nil
+}
+
 func (s *Service) verifyIDToken(ctx context.Context, d oidcDiscovery, clientID, nonce, token string) (oidcClaims, error) {
 	parts := strings.Split(token, ".")
 	if len(parts) != 3 {
@@ -484,22 +529,12 @@ func (s *Service) verifyIDToken(ctx context.Context, d oidcDiscovery, clientID,
 	if json.Unmarshal(headerBytes, &header) != nil || header.Alg != "RS256" || header.Kid == "" {
 		return oidcClaims{}, errors.New("jwt header")
 	}
-	req, err := http.NewRequestWithContext(ctx, http.MethodGet, d.JWKSURI, nil)
+	// JWKS 按 provider 缓存数分钟:每次登录都拉 discovery + JWKS 是 2-3 个
+	// 同步往返;缓存以 IdP 最短键轮换周期为界(默认 5 分钟)。
+	keys, err := s.jwksFor(ctx, d.JWKSURI)
 	if err != nil {
 		return oidcClaims{}, err
 	}
-	response, err := s.oidcHTTPClient().Do(req)
-	if err != nil {
-		return oidcClaims{}, err
-	}
-	defer response.Body.Close()
-	payload, _ := io.ReadAll(io.LimitReader(response.Body, oidcMaxResponse+1))
-	var keys struct {
-		Keys []struct{ Kid, Kty, N, E string }
-	}
-	if response.StatusCode/100 != 2 || len(payload) > oidcMaxResponse || json.Unmarshal(payload, &keys) != nil {
-		return oidcClaims{}, errors.New("jwks")
-	}
 	var key *rsa.PublicKey
 	for _, j := range keys.Keys {
 		if j.Kid == header.Kid && j.Kty == "RSA" {