saveCachedPropertiesWithLock

Persist the access-locked property list alongside the role cache. The offline producer pairs this with getCachedRoles so locked properties with no granted role get the fail-closed sentinel. A null/empty list clears the entry. Shares the role cache TTL/clear semantics (AUTH_CACHED_ROLES_TS).