Mint a Featurebase identity JWT for the current user.

Returns { "token": null } — not an error — when no signing secret is configured, so the widgets degrade to anonymous instead of the app logging a failure on every load.