Returns the issuer of the instance at origin, cached: origin itself, or, when origin is where the instance's pages are and its API lives at another, the issuer the pages' metadata names, whose own metadata must name those pages back as where its /authorize is. People know an instance by the address in their browser, which a sign-in form or the trust list may be given; a handle and the stored identities name the issuer.