[wolf4ood]

What this PR changes/adds

Extends the Tuning page with what the 1.0 load tests showed (multi-tenant runtime, up to 100 participants,
negotiation + transfer at 40+ flows/s):

• Database connections: corrects the catalog statement after fix: verify the DSP catalog request token outside the transaction Connector#6180 (the token is now validated
  before the transaction), and adds the NATS workers to the pool sizing.
• DID resolution (new): edc.did.resolver.cache.size / .expiry. The cache is shared by all hosted participants,
  and a miss is a synchronous HTTP fetch on the request thread. With 99 counter-parties the default of 50 entries
  raised the median negotiation time from ~1 s to 11 s.
• Finding the limit: two more symptoms, all NATS workers busy and threads in WebDidResolver.resolve.
• Policy evaluation (new): edc.policy.cel.expressions.cache.ttl.ms, and what it means for multi-replica setups.
• JVM memory (new): the default heap is 25% of the container limit. How to check the limit the JVM detected, and a
  warning about JDK builds that don't detect it on kernels without cgroup v1 memory support (observed with Temurin
  24.0.2).

Why it does that

Briefly state why the change was necessary.

Further notes

List other areas of code that have changed but are not necessarily linked to the main feature. This could be method
signature changes, package declarations, bugs that were encountered and were fixed inline, etc.

Who will sponsor this feature?

Please @-mention the committer that will sponsor your feature.

Linked Issue(s)

Closes # <-- insert Issue number if one exists

Please be sure to take a look at the contributing guidelines and our etiquette for pull requests.

[ndr-brt]

great stuff!