Function discoverAndValidateOIDCIssuerWellKnown

Discover and validate delegated auth configuration

the OIDC issuer as returned by the /auth_issuer API

validated authentication metadata and optionally signing keys

when delegated auth config is invalid or unreachable