Figured it out.
WAR_ROOT/META-INF/
is the webapp metadata, looked up by servletContext.getResource("/META-INF/bla")
.
WAR_ROOT/WEB-INF/classes/META-INF
is java classes metadata, looked up by getContextClassLoader().getResource("/META-INF/bla")
.
I created META-INF/aop.xml
in my Config project (which is on the classpath), and everything is working properly now.