TypeScript port of VTEX.DataSigner — sign protobuf and JWT ES256 payloads against the VTEX data-signing key store; cryptographically compatible with the original .NET VTEX.DataVerifier.