Update JWT dependency

[neilalexander]

Signed-off-by: Neil Twigg neil@nats.io

[synadia-claude-reviewer]

Claude finished @neilalexander's task in 45s —— View job

---

PR Review: Update JWT dependency

• Gather context and examine PR changes
• Review go.mod and go.sum changes
• Check for security or compatibility concerns
• Post review summary

---

Review Summary

This is a straightforward patch-level dependency bump of github.com/nats-io/jwt/v2 from v2.8.0 → v2.8.1. The go.sum hashes are updated correctly to match the new version.

What's in v2.8.1:

• Fix: allow import of same service subject from different accounts
• Fix: credential generation now validates the key matches the JWT provided
• Fix: DecorateSeed is more resilient against short input
• Fix: weighted mappings now correctly enforce the 100% cap
• Fix: added a size check for JWT tokens (potential DoS hardening)

The changes are minimal (3 lines in go.mod/go.sum) and purely a version bump — no logic changes in this repo.

Assessment: The update includes several correctness and robustness fixes in the JWT library. The JWT token size check (nats-io/jwt#248) and credential key validation (nats-io/jwt#242) are noteworthy security-relevant improvements. No concerns with this change.

[MauriceVanVeen]

LGTM