OptionalcacheCache-Control: public, max-age=<N> lifetime in seconds for the JWKS
response. Defaults to DEFAULT_JWKS_CACHE_MAX_AGE. Callers
honoring oauth.jwt.jwksCacheMaxAge resolve it via
resolveJwksCacheMaxAge. Keep well below the key-overlap window so a
freshly-rotated kid propagates to caching verifiers in time.
OptionalpathAbsolute path the router registers internally. Defaults to
DEFAULT_JWKS_PATH. Callers honoring the oauth.jwt.jwksPath
override resolve it via resolveJwksPath and pass the result here so
the registered path matches the advertised jwks_uri.
Options for createRouter.