Secure JWT Authentication with Refresh & Revocation in ASP.NET Core

Design and implement a production-grade JWT authentication system in ASP.NET Core, featuring secure access tokens, refresh token rotation, token revocation, and best-practice security hardening. The solution should include role-based authorization, token expiration handling, secure storage strategies, and real-world implementation patterns suitable for enterprise applications.