Track the signing component in the Carbide api server that implements the signing JWT-SVIDs, key management and JWKS/SPIFFE-bundle distribution.
sub tasks:
- key pair generation for tenants
- encryption (with master-key) of private key used to sign JWT-SVID
- master key storage/mgmt
- signing of identity requests
- JWKS distribution APIs