b up
goodbye SWD, and now webfinger endpoint uses JRD mime type
jwk -> jwks, remove x509
update discovery & client registration