NewBuilder creates a new robot account builder meant to be associated with a workflowRun It does not expire but its revocation status is checked on every request Currently we use a simple hmac encryption method meant to be continuously rotated TODO: additional/alternative encryption method, i.e DSE asymmetric, see CAS robot account for reference.

This type of JWT is meant to be used by the attestations service.

Previous audience, deprecated, we keep it to not to break compatibility.