Builds an alg:none JWT (empty signature) from a JSON payload or an existing token, for testing signature-bypass flaws.
