fn sign_hs256_claim<T: Serialize>( claim: &T, key: &JwtKey, ) -> Result<String, Error>
Signs any serializable claim payload as HS256 using the shared JWT secret.