2026-06-20: WebRTC token (HS256, 5-minute TTL)

/v1/webrtc/token now issues HS256 JWTs with a 5-minute TTL.