Function init_jekt_public_key_resolver 

pub fn init_jekt_public_key_resolver<F>(resolver: F)
where
    F: Fn(&str) -> Option<String> + Send + Sync + 'static,

Install the process’s agent-public-key resolver. Idempotent — first call wins, same contract as init_local_auth_key.

Called from bootstrap once the Store is open. Until it is called (and for any agent with no LAN keypair minted yet) entries are written with an empty jekt_public_key, which readers treat as “cannot check” — see that field’s doc comment.