Build a JWT Library

Implement JWT (JSON Web Tokens) end-to-end: base64url encoding, signing with HS256/RS256, claim validation, key rotation via kid, and defenses against the well-known JWT attacks (alg=none, key confusion, weak secrets). Used by every modern auth system.