When ArgoCD shows Healthy but Keycloak silently strips JWT claims

ArgoCD reported Synced and Healthy. The Keycloak Helm release was green. And the downstream timeline service was returning 401 on every authenticated request. That was the call we got: every dashboard