* Expose JWKS cluster config through JWTProviderConfigEntry * fix typos, rename trustedCa to trustedCA