Key fetching & JSON verification

The server should be able to fetch another server's keys and check that a JSON payload was signed by said keys

edit: turns out there was already canonical JSON code, it just barely got used so i missed it