密钥切换后残留 token 会在 getExtra 抛 SaJwtException,现统一返回 401 引导重新登录。 Confidence: high Scope-risk: narrow Co-authored-by: Cursor <cursoragent@cursor.com>