types: use newtype where possible
obey hlint
JWK: use ByteString rather than Integer for Oct key material
JWS: implement HMAC SHA-256 (generation; no validation)