feat: Document completed tasks for KMS, Cryptography, and Plugin Libraries

- Added detailed task completion records for KMS interface implementation and CLI support for file-based keys.
- Documented security enhancements including Argon2id password hashing, audit event contracts, and rate limiting configurations.
- Included scoped service support and integration updates for the Plugin platform, ensuring proper DI handling and testing coverage.

src/__Libraries/StellaOps.Configuration/AuthoritySigningOptions.cs

@@ -11,6 +11,11 @@ public sealed class AuthoritySigningOptions
     /// </summary>
     public bool Enabled { get; set; } = true;
 
+    /// <summary>
+    /// Duration that JWKS responses are cached before being rebuilt.
+    /// </summary>
+    public TimeSpan JwksCacheLifetime { get; set; } = TimeSpan.FromMinutes(15);
+
     /// <summary>
     /// Signing algorithm identifier (ES256 by default).
     /// </summary>
@@ -77,5 +82,10 @@ public sealed class AuthoritySigningOptions
         {
             key.Validate(KeySource);
         }
+
+        if (JwksCacheLifetime <= TimeSpan.Zero || JwksCacheLifetime > TimeSpan.FromHours(1))
+        {
+            throw new InvalidOperationException("Authority signing configuration requires signing.jwksCacheLifetime to be between 00:00:01 and 01:00:00.");
+        }
     }
 }