Signer and Serializer should support a list of secret keys for key rotation

Signer and Serializer should support a list of secret keys for key rotation: a task in repo2rlenv-swe-next (Harbor dataset). Currently, Signer and Serializer only accept a single secret key. There's no built-in way to rotate keys — that is, to accept tokens signed with an old key while signing new…