The problem appeared out of nowhere. And nowhere is where it went...

A few hours after I had found that "workaround" and wrote the original question, Service 1 started to work again with the original configuration for JwtBearerOptions.MetadataAddress

Oh well.