fix(auth): resolve JWT InvalidSignatureError and improve frontend UX

- Fix auth by using idToken fallback when accessToken audience mismatches
- Add PyJWT verification with audience-aware token selection in frontend
- Source health: track last_attempt_time and error status per source
- Frontend: fix modal outside x-data scope, add circular-safe JSON stringify
- Frontend: support multi-select service filter with All/None toggles
- Frontend: improve filter layout into organized rows
- Frontend: fix text overflow and result pill colors (success/succeeded)
- Intune: normalize application actors (auditActorType=Application)
- Add cache-control middleware for HTML/API responses
- Update tests for multi-service filtering and source health

backend/tests/test_api.py

@@ -73,6 +73,42 @@ def test_list_events_filter_by_service(client, mock_events_collection):
     assert data["items"][0]["service"] == "Exchange"
 
 
+def test_list_events_filter_by_services(client, mock_events_collection):
+    mock_events_collection.insert_one({
+        "id": "evt-1",
+        "timestamp": datetime.now(UTC).isoformat(),
+        "service": "Exchange",
+        "operation": "Update",
+        "result": "success",
+        "actor_display": "Alice",
+        "raw_text": "",
+    })
+    mock_events_collection.insert_one({
+        "id": "evt-2",
+        "timestamp": datetime.now(UTC).isoformat(),
+        "service": "Directory",
+        "operation": "Add",
+        "result": "success",
+        "actor_display": "Bob",
+        "raw_text": "",
+    })
+    mock_events_collection.insert_one({
+        "id": "evt-3",
+        "timestamp": datetime.now(UTC).isoformat(),
+        "service": "Teams",
+        "operation": "Delete",
+        "result": "success",
+        "actor_display": "Charlie",
+        "raw_text": "",
+    })
+    response = client.get("/api/events?service=Exchange&service=Directory")
+    assert response.status_code == 200
+    data = response.json()
+    assert len(data["items"]) == 2
+    returned_services = {item["service"] for item in data["items"]}
+    assert returned_services == {"Exchange", "Directory"}
+
+
 def test_list_events_page_size_validation(client):
     response = client.get("/api/events?page_size=0")
     assert response.status_code == 422