Verify remote tokens from an on-disk JWKS cache

Added JwksCache to persist issuer public keys on disk; remote tokens now verify from cache without network fetch when key is present and cache is fresh.