What are JWT's signed with?

Yes, the secret used for generating broadcaster tokens in local mode is the one passed as -s parameter.

I’m using the following command to start up the developer rig in local mode:
yarn start -s bXlfc3VwZXJfUzNLcmVULVNVNEpKSg== -l ../panel.json