Use an alternative to the mTLS cert for signing JWTs

[Sinck]

The JWT used by scout and agent are signed using the mTLS cert provided during discovery which is provided by vault. in order to remove the dependency on vault, an alternative is needed.

Suggested fix is to use the fTPM provided by BF3s and BF4s