api: use ed25519 for admin request signing