RS256-signed access tokens with a public JWKS endpoint

Access tokens are now signed with RS256 using a rotatable key pair, instead of a shared symmetric secret. Public keys are served at GET /.well-known/jwks.json, so SDKs and backends can verify tokens locally — with zero network round trip — instead of calling session/validate for every request. Key rotation is supported without invalidating tokens signed under the previous key.