Signed project phone-home JWT.
JWT id for audit correlation.
Deployment environment stamped into the JWT env claim. Tokens minted before GTM-441 surface as production.