Update abandoned web-token dependencies

[ejunker]

Fix warning about abandoned packages by replacing them with web-token/jwt-library

Package web-token/jwt-checker is abandoned, you should avoid using it. Use web-token/jwt-library instead.
Package web-token/jwt-core is abandoned, you should avoid using it. Use web-token/jwt-library instead.
Package web-token/jwt-encryption is abandoned, you should avoid using it. Use web-token/jwt-library instead.
Package web-token/jwt-key-mgmt is abandoned, you should avoid using it. Use web-token/jwt-library instead.
Package web-token/jwt-signature is abandoned, you should avoid using it. Use web-token/jwt-library instead.
Package web-token/jwt-signature-algorithm-rsa is abandoned, you should avoid using it. Use web-token/jwt-library instead.

I noticed there is a composer.lock file. It is not common to include the composer.lock for libraries. It should probably be removed and added to .gitignore I think after that the tests would pass.

I now see that web-token/jwt-library[3.3.0, ..., 3.3.1] require php >=8.1 so you might need to release a new version that dropped support for PHP 7.4 and 8.0