chore: update configuration and Docker setup for JWT and test results

Enhanced the .gitignore to exclude test results and updated the Dockerfile to include a new entrypoint script for improved container initialization. Refactored JWT configuration to support additional parameters for automatic refresh intervals, ensuring better control over token management. Updated the ConfigurationResolver to enforce required environment variables without hardcoded fallbacks, enhancing security and flexibility.

_docs/02_document/state.json

@@ -43,6 +43,46 @@
       "renames_doc_only_until_jira_lands": true,
       "jira_epic": "AZ-EPIC (rename flights -> missions; multi-vehicle; drop GPS-Denied)",
       "jira_children_in_plan": ["B1", "B2", "B3", "B4", "B5", "B6", "B7", "B8", "B9", "B10", "B11", "B12"]
+    },
+    {
+      "trigger": "targeted re-verification of JWT/Config/CORS/DB-schema/filter drift against actual .cs source (2026-05-14, autodev cycle 1)",
+      "drift_findings_doc": "_docs/02_document/05_drift_findings_2026-05-14.md",
+      "ripple_log": "_docs/02_document/ripple_log_cycle1.md",
+      "areas_revised": [
+        "JWT validation model (HS256 shared-secret -> ECDSA-SHA256 + JWKS + iss/aud + alg pin)",
+        "Configuration resolution (hardcoded fallbacks -> ResolveRequiredOrThrow, 4 required vars)",
+        "CORS gating (always-permissive -> production-gated via CorsConfigurationValidator)",
+        "DB schema (TIMESTAMP not TIMESTAMPTZ; explicit REFERENCES on every FK; DEFAULT clauses)",
+        "Filter case sensitivity (case-sensitive in docs -> case-INSENSITIVE in code) + result ordering (unspecified -> documented)",
+        "Waypoint nested existence check (two-step in docs -> single composite predicate in code)"
+      ],
+      "docs_touched": [
+        "modules/auth.md", "modules/program.md", "modules/database.md",
+        "components/05_identity/description.md", "components/07_host/description.md",
+        "diagrams/flows/flow_jwt_validation.md", "diagrams/flows/flow_startup_migration.md",
+        "architecture.md", "data_model.md", "system-flows.md", "04_verification_log.md",
+        "../00_problem/problem.md", "../00_problem/restrictions.md", "../00_problem/acceptance_criteria.md",
+        "../00_problem/security_approach.md", "../00_problem/input_data/data_parameters.md",
+        "../01_solution/solution.md"
+      ],
+      "phase_2_complete": {
+        "completed_at": "2026-05-14T20:55:00Z",
+        "test_spec_files_touched": [
+          "../../docker-compose.test.yml",
+          "tests/environment.md",
+          "tests/test-data.md",
+          "tests/security-tests.md",
+          "tests/resilience-tests.md",
+          "tests/blackbox-tests.md",
+          "../00_problem/input_data/expected_results/results_report.md",
+          "tests/traceability-matrix.md"
+        ],
+        "new_test_ids_added": ["NFT-SEC-04b", "NFT-SEC-10", "NFT-SEC-11", "NFT-SEC-12", "NFT-SEC-13"],
+        "rewritten_tests": ["NFT-SEC-02", "NFT-SEC-03", "NFT-SEC-04", "NFT-SEC-06", "NFT-RES-05", "NFT-RES-07", "FT-P-04", "FT-P-05", "FT-P-08", "FT-N-01"],
+        "coverage_after": "97% in-scope (was 93%)",
+        "uncovered_items_resolved": ["E3", "E9", "AC-6.2"]
+      },
+      "phase_3_pending": "resume autodev Step 4 (Code Testability Revision)"
     }
   ],
   "step_4_5_glossary_vision": "confirmed",
@@ -63,5 +103,13 @@
   "verification_log": "_docs/02_document/04_verification_log.md",
   "verification_corrections_inline": 9,
   "verification_drift_flagged": 2,
-  "last_updated": "2026-05-14T09:32:00Z"
+  "verification_re_run_2026_05_14": {
+    "doc": "_docs/02_document/04_verification_log.md (§ 4.3)",
+    "drift_findings": "_docs/02_document/05_drift_findings_2026-05-14.md",
+    "ripple_log": "_docs/02_document/ripple_log_cycle1.md",
+    "phase_1_doc_revisions": "complete",
+    "phase_2_test_spec_re_issue": "complete",
+    "phase_3_resume_step_4": "pending"
+  },
+  "last_updated": "2026-05-14T20:51:00Z"
 }