- auth/rs256.go: RS256 JWT validation with AAMOS public key
- auth/rs256_test.go: 4 RS256 tests (success, invalid sig, expired, HS256 reject)
- auth/integration_test.go: Real AAMOS identity service integration test
- Copied jwt-public.pem from /opt/amos/data/keys/
- ouroboros-identity running on port 3208