Two-level (Caffeine L1 + Redis L2) cache with pub/sub invalidation and penetration/breakdown guards.