Generate a new ed25519 key pair (base64 encoded). Keep the private key safe — anyone who has it can sign licenses.