Feat/kms login

[charming-wicket-5502]

No description provided.

[Copilot]

Pull request overview

Adds a standard OIDC-style JWKS endpoint (/.well-known/jwks.json) so external services can discover the authentication server’s EC P-256 JWT signing public key, and updates API/docs accordingly.

Changes:

• Introduces JWKS document generation from PEM (OpenSSL and rustls-only implementations) and exports it via the session module.
• Adds a new unauthenticated GET /.well-known/jwks.json endpoint wired into the Actix app and OpenAPI schema.
• Updates documentation references from the prior /public/jwks location to the new well-known location.

Reviewed changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
server/src/session/mod.rs	Re-exports JWKS-related types/helpers from the session JWT module.
server/src/session/jwt.rs	Adds JWKS data type and PEM→JWKS builder implementations.
server/src/server/endpoints/mod.rs	Exposes the new JWKS handler from the endpoints module.
server/src/server/endpoints/client_endpoints.rs	Implements the jwks_well_known handler returning the prebuilt JWKS JSON.
server/src/server/auth_server.rs	Builds JWKS once at startup, injects it into app data, and registers the /.well-known/jwks.json route.
server/documentation/openapi.yaml	Updates the documented JWKS path and expands the response schema/example.
server/documentation/authorization_and_administration.md	Updates endpoint listing to the new JWKS URL.
server/documentation/authentication_flows.md	Updates flow diagrams/text to reference /.well-known/jwks.json.
server/documentation/api_reference.md	Updates the API reference section header for the new JWKS endpoint.