This codebase uses test keys from RFC 9421. It would be ideal to reference ways to generate or leverage existing providers of JWKS. Cloudflare has [such documentation](https://developers.cloudflare.com/bots/concepts/bot/verified-bots/web-bot-auth/#1-generate-a-valid-signing-key) for some cases.