Represents the set of JWT signing keys managed by IdentityProvider.
Current signing key (JWK private key).
Optional
Previous signing key — kept for grace-period validation after rotation.
ISO 8601 timestamp of the last rotation.
Represents the set of JWT signing keys managed by IdentityProvider.