fn build_jwt( client_email: &str, scope: &str, token_uri: &str, now_secs: u64, private_key_pem: &str, ) -> Result<String, String>
Assembles and RS256-signs the service-account JWT assertion.