Returns the RSA public key used to verify shadow token signatures (RFC 7517). The realm path parameter is accepted but does not affect the response — a single signing key is shared by all realms.