#388 HIGH: Race condition in RBAC ClientKeyManager cache (no thread lock)

rbac_manager.py:91-135 - ClientKeyManager._cache is plain dict without thread locks. Comment claims LRU is thread-safe but implementation is NOT. Concurrent Bulkhead threads can corrupt cache. Fix: Add threading.Lock.