Thread resolver return types through verify and decrypt results. Add
overloads so wrappers can forward either keys or resolvers.
Infer importJWK and generateSecret results from their inputs. Keep JWT
payload generics unconstrained while rejecting known non-object shapes.
Signed-off-by: Filip Skokan <[email protected]>
Declare JWK shapes as aliases so they satisfy the implicit index
signatures used by host `JsonWebKey` types. Export the AKP variants,
add "oth", and exclude private members from embedded JWK headers.
Alias the host `CryptoKey` when available and use a checked fallback
otherwise, avoiding both a competing nominal type and an `any` result.
Narrow `KeyObject.type` to the values it can hold.
Signed-off-by: Filip Skokan <[email protected]>
Filip Skokan