ADR-020: record the JWKS refresh gap in Future work

João Pereirarequested to merge
jdrpereira/adr-020-r2-current-state into main

What

Follow-up to !20799 (merged), two changes:

  1. Records in Future work that R2's periodic JWKS refresh and stale-key retention are not implemented yet (one-shot startup fetch today; issuer key rotation rejects new tokens until restart), tracked in gitlab#616174. The R2 section itself stays as the desired state; the bullet disappears when the fix ships.
  2. Drops the "source of truth" pointer at the top of the service-to-service section: it declares service-access.md authoritative for the whole pattern, but that doc only covers the IAM-repo services, and the section now also describes the Rails to Artifact Registry edge. Per the !20799 (merged) thread, the ADR sticks to the prescribed pattern rather than carrying pointers that rot.

vale and markdownlint pass.

Edited by João Pereira

Merge request reports