feat: rewrite SecurityConfig — single filter chain, Logto OAuth2 Resource Server

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/main/resources/application.yml

@@ -29,10 +29,6 @@ management:
       show-details: when-authorized
 
 cameleer:
-  jwt:
-    expiration: 86400 # 24 hours in seconds
-    private-key-path: ${CAMELEER_JWT_PRIVATE_KEY_PATH:}
-    public-key-path: ${CAMELEER_JWT_PUBLIC_KEY_PATH:}
   identity:
     logto-endpoint: ${LOGTO_ENDPOINT:}
     logto-public-endpoint: ${LOGTO_PUBLIC_ENDPOINT:}
@@ -49,7 +45,6 @@ cameleer:
     deployment-thread-pool-size: 4
     container-memory-limit: ${CAMELEER_CONTAINER_MEMORY_LIMIT:512m}
     container-cpu-shares: ${CAMELEER_CONTAINER_CPU_SHARES:512}
-    bootstrap-token: ${CAMELEER_AUTH_TOKEN:}
     cameleer3-server-endpoint: ${CAMELEER3_SERVER_ENDPOINT:http://cameleer3-server:8081}
     domain: ${DOMAIN:localhost}
   clickhouse: