/// Per ATProto spec (OpenID uses RS256)
const String fallbackAlg = 'ES256';