Signing keys

The viewer-token keyring. Platform scope, super-user only.

📄️The viewer-token keyring

**Super-user only, and no `X-Tenant-Id`.** One key signs viewer tokens for

📄️Rotate the signing key

Appoints a new key and leaves the previous one **verifying** until it retires.