Supervises isolated, temporary Lighter signer owners.

Each child owns exactly one API signing key and its external OS process. Children are temporary so terminating one is the key-removal boundary.