issuerUrl

The effective issuer URL used for OIDC discovery and token validation.

Derived by OAuth2ClientBuilder from the base org URL and authorizationServerId:

• No authorizationServerId: the base org URL itself.

• With authorizationServerId: "$baseUrl/oauth2/$authorizationServerId".