Token Issuer Metadata: A Proposal for Config-as-Code SSO / hacker news