Recent JWX possibly broken, quote go version

Documentation fixes

Merge pull request #9 from yaronf/remove-keyid

Breaking change: keyid is optional, now in SignConfig/VerifyConfig

Normalize an empty path

Merge pull request #7 from yaronf/dependabot/go_modules/github.com/le…

…strrat-go/jwx/v2-2.0.21

Bump github.com/lestrrat-go/jwx/v2 from 2.0.19 to 2.0.21

RFC 9421

Add response signature per the new Sec. 2.4

Bump GH actions

Update doc for release

Log sanitization, bump yaml.v3