Unsupported algorithm of ES384

```java
halo | at io.netty.channel.SingleThreadIoEventLoop.run(SingleThreadIoEventLoop.java:196) ~[netty-transport-4.2.15.Final.jar:4.2.15.Final]
halo | at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:1195) ~[netty-common-4.2.15.Final.jar:4.2.15.Final]
halo | at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) ~[netty-common-4.2.15.Final.jar:4.2.15.Final]
halo | at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) ~[netty-common-4.2.15.Final.jar:4.2.15.Final]
halo | at java.base/java.lang.Thread.run(Unknown Source) ~[na:na]
halo | Caused by: org.springframework.security.oauth2.jwt.BadJwtException: Unsupported algorithm of ES384
halo | at org.springframework.security.oauth2.jwt.NimbusReactiveJwtDecoder$JwkSetUriReactiveJwtDecoderBuilder.createSelector(NimbusReactiveJwtDecoder.java:538) ~[spring-security-oauth2-jose-7.1.0.jar:7.1.0]
halo | at org.springframework.security.oauth2.jwt.NimbusReactiveJwtDecoder$JwkSetUriReactiveJwtDecoderBuilder.lambda$processor$7(NimbusReactiveJwtDecoder.java:520) ~[spring-security-oauth2-jose-7.1.0.jar:7.1.0]
halo | at reactor.core.publisher.MonoFlatMap$FlatMapMain.onNext(MonoFlatMap.java:132) ~[reactor-core-3.8.6.jar:3.8.6]
halo | ... 95 common frames omitted
halo |
halo | 2026-06-23T01:15:02.294+08:00 ERROR 1 --- [or-http-epoll-6] r.h.o.HaloOAuth2AuthenticationWebFilter : Failed to authentication with OAuth2
halo |
halo | org.springframework.security.oauth2.core.OAuth2AuthenticationException: [invalid_id_token] Unsupported algorithm of ES384
halo | at org.springframework.security.oauth2.client.oidc.authentication.OidcAuthorizationCodeReactiveAuthenticationManager.lambda$authenticate$3(OidcAuthorizationCodeReactiveAuthenticationManager.java:155) ~[spring-security-oauth2-client-7.1.0.jar:7.1.0]
halo | at reactor.core.publisher.Mono.lambda$onErrorMap$0(Mono.java:3841) ~[reactor-core-3.8.6.jar:3.8.6]
halo | at reactor.core.publisher.Mono.lambda$onErrorResume$0(Mono.java:3931) ~[reactor-core-3.8.6.jar:3.8.6]
halo | at reactor.core.publisher.FluxOnErrorResume$ResumeSubscriber.onError(FluxOnErrorResume.java:95) ~[reactor-core-3.8.6.jar:3.8.6]
halo | at reactor.core.publisher.FluxOnErrorResume$ResumeSubscriber.onError(FluxOnErrorResume.java:107) ~[reactor-core-3.8.6.jar:3.8.6]
halo | at reactor.core.publisher.Operators.error(Operators.java:198) ~[reactor-core-3.8.6.jar:3.8.6]
halo | at reactor.core.publisher.MonoError.subscribe(MonoError.java:54) ~[reactor-core-3.8.6.jar:3.8.6]
```

环境信息：
halo: halohub/halo:2.25.3
plugin-oauth2: 1.7.1

Start with the OAuth2 authentication flow and the Spring Security NimbusReactiveJwtDecoder calls named in the stack trace. Reproduce the failure using Halo 2.25.3, plugin-oauth2 1.7.1, and an identity provider issuing ES384 tokens. Done means the cause and supported resolution are confirmed, with OAuth2 login handling this algorithm or a documented compatibility limitation.

Written by the indexing model from the issue text.