Update RSA keys from OIDC automatically

[kuzznya]

RSA keys can be rotated by the OIDC provider (Keycloak), so to follow OIDC spec, service should automatically fetch new keys if it gets unrecognized RSA keys