- Cache access tokens alongside ID tokens for consistent retry behavior - Add targetUrl to registry test assertion after merge - Add tests for cache hits, 403 retry, and retry exhaustion