the mock is returning a plain string, not a valid JWT

[chrisw-dev]

the mock is returning a plain string, not a valid JWT
Consuming services Go OIDC libraries are trying to verify this as a real JWT and failing.

The issue is that the mock OAuth server doesn't sign JWTs properly - it just returns placeholder strings. We need to have the mock OAuth server return a properly formatted (even if fake) JWT