TypeAlias.DidDocumentResponse
type DidDocumentResponse = z.infer<typeof didDocumentResponseSchema>;
W3C DID Document a tenant publishes at https://{domain}/.well-known/did.json
so external verifiers can resolve did:web:{domain} and validate VC
signatures without contacting Keyban.