Local+Cloud provisioning keeps the WebID subject on the Cloud identity, but the protected storage lives on the Local SP. The Local profile and Cloud-side Pod settings must therefore advertise the Local SP issuer and storage URL, otherwise CSS rejects DPoP tokens as coming from an untrusted issuer.\n\nTested: bun run check:platform-package-version\nTested: bun run build:ts\nTested: bun test tests/provision/LocalPodProvisioningService.test.ts tests/provision/ProvisionPodCreator.test.ts\nTested: bun test tests/runtime/XpodRuntime.integration.test.ts