* hpke: add HPKE key to JWKS endpoint * fix test, add http caching headers * fix error message * use pointers