feat(KLEF): Wire up JWTValidator from the SDK in client.go/jwks.go

[JeremyNRoos]

Pull Request

Summary

Integrates the new JWTValidator from the Go Plugin SDK, deprecating the custom JWKS verification logic. Also implements the newly required identity management and session methods for Keycloak.

Related Issues

Closes #

---

Changes

What's Included

• Replaced internal jwks.go utilities with the SDK's central JWTValidator.
• Wired up ChangePassword, ListSessions, and RevokeSession via Keycloak's client and gRPC server adapters.
• Added Dockerfile.local to support isolated local dev setups.

What's Not Included

• UI manifest edits for Keycloak configuration parameters.

---

Testing

How Was This Tested?

• Tested locally by spinning up Keycloak and issuing/revoking tokens using the CLI/mock clients.
• Verified successful compilation against the updated plugin-sdk-go module.

Test Coverage

• Unit tests added or updated
• Integration tests added or updated
• Manually tested end-to-end

---

Breaking Changes

Does this PR introduce breaking changes?

• Yes
• No

If yes, describe the impact and any required migration steps:

---

Security Considerations

• This PR affects authentication or authorization logic
• This PR touches secrets, tokens, or environment variables
• This PR affects infrastructure, deployment pipelines, or network configuration

If any box is checked, describe the security impact and any mitigations applied:
Adopting the SDK validation standardizes the security baseline. Keycloak credentials and session endpoints are now securely delegated back to the platform.

---

Documentation

Does this PR require documentation updates?

• Yes
• No

If yes, check all that apply:

• README.md
• ARCHITECTURE.md
• API reference
• Architecture diagrams (C4 / DDD)
• /docs

---

UI/UX (If Applicable)

• Includes new components or views
• Changes styles or theme tokens
• Responsive behavior verified
• Requires design approval

Screenshots or recordings:

---

Pre-Merge Checklist

• PR title follows semantic format (feat:, fix:, chore:, docs:, refactor:, test:)
• All CI checks passing
• Code follows project style guidelines
• No debug logs or commented-out code left in
• Dependencies reviewed (no unnecessary additions)
• No sensitive information included

---

Reviewer Notes