This change adds the authentication backend for when connected via a

GitHub App. The app record contains a client secret, which is used to

mint short-lived RS256 JWT tokens for each install record.

Ran unit tests.
Used as part of the larger GitHub App change.