Mint a self-signed dev token for local testing of app.py. First run generates dev_private.pem + dev_jwks.json in the current directory. Subsequent runs reuse them.