First release

• Static signing key configuration w/ HMAC, RSA and EC support
• Single valid issuer and audience configuration
• Token expiration, "not before" and "issued at" checks with clock skew tolerance
• Authorization policy config with YAML
• Reverse proxy mode without TLS termination