Get the public signing key.

Returns the operator's ES256 (ECDSA P-256) public signing key in PEM, JWK, and fingerprint form. Use the public key to verify the X-Philter-Signature JWT header returned on successful POST /api/filter and POST /api/explain responses when output signing is enabled. This endpoint does not require authentication.