JWS: clean up "crit" implementation

Change the "crit" header parameter such that is is modelled by the
more accurate type 'Maybe (NonEmpty (Text, Value))'.  A dose of
'mapM' cleans up the implementation.

Enforcing the "no duplicate keys" restriction is a TODO.