Embedded mode uses HS256 (symmetric, integrator-supplied secret). Standalone mode uses RS256 (asymmetric, allowthem manages the keypair and publishes via JWKS).
Full reference coming soon.