feat: draft-10 alignment (aauth 0.2.2, Ed25519 alg)

[marcofanti]

Aligns the person server with AAuth draft-10 so it interoperates with aauth-full-java-demo (which is on the draft-10 library).

• Bump aauth library 0.1.1 → 0.2.2.
• Emit the fully-specified Ed25519 alg (RFC 9864) in PS and AS JWKs, dropping the two hardcoded alg=EdDSA overrides — the library's Jwk.publicKeyToJwk now sets it.
• Test updates for the draft-10 wire format: drop alg=EdDSA from test JWK helpers (the library now rejects the polymorphic identifier), assert Ed25519, add the account field to positional ResourceTokens.Spec constructors.

Why it matters: before this, the demo (draft-10, Ed25519) minted resource tokens the PS (0.1.1, EdDSA-only) rejected at /token — breaking the three-party exchange in auth-token / consent / missions modes. The mission endpoints were already implemented natively; this closes the only real gap. Full suite green (132 tests).

Depends on library fix marcofanti/aauth-java-library#16 (http ps-claim tolerance), released as 0.2.2.

[marcofanti]

Superseded by #6 (parallel draft-10 work that landed on main while this was being prepared). main already bumps to aauth 0.2.1, emits Ed25519, and guards the ps claim to https-only origins — a cleaner fix than this branch's reliance on library-side http tolerance. Closing to avoid clobbering that approach. main is green (134 tests).