pub fn scitt_signer() -> Result<Arc<dyn Signer>>
Loads the SCITT signer configuration, requiring explicit key material.