[dajiaohuang]

What is the purpose of the change

Addresses two unit-test failures reported in #5482 after applying the captured #5483 fixes. TicketCipher.decrypt recognizes V2 envelopes, but a cipher configured to issue legacy V1 tickets has no AES key, so it throws InvalidKeyException instead of decrypting existing V2 tickets during rollback. Separately, the linkis-module test properties omit the required crypt key, preventing ServerConfigurationTest and SecurityFilterTest from initializing.

Related issues/PRs

Related issue: #5482 (the remaining unit-test failures; this PR does not claim to resolve the other reported CI issues).

Brief change log

• Keep the V2 issuance choice separate from the AES key used to decrypt V2 envelopes. V1 mode continues issuing DES tickets while retaining the documented ability to decrypt V2 tickets.
• Add a synthetic, non-deployable wds.linkis.crypt.key only to linkis-module test properties. Production configuration remains unchanged and fail-closed.

Validation

• JDK 8, captured Fix Scala compilation of linkis-module #5483 head b346cd419b08b919e5126913b519228b86213c4b plus these changes: focused Maven run for ClassUtilsTest, TicketCipherTest, ServerConfigurationTest, and SecurityFilterTest passed (30 tests total).
• The current captured master bad400a77b9502a68ec229ce6a5aedab6f039b28 still has compilation errors fixed by Fix Scala compilation of linkis-module #5483, so the module tests were run on Fix Scala compilation of linkis-module #5483's captured head.
• No real database, LDAP, cluster, production service, customer data, credentials, Docker/WSL, paid resource, or CI run was used.