fix(security): upgrade jsonwebtoken to 9.0.3 (pulls patched jws 4.0.1)

[uibm]

Checklist

• npm test passes (tip: npm run lint-fix can correct most style issues)
• tests are included
• documentation is changed or added

[CLAassistant]

All committers have signed the CLA.

[pyrooka]

Thank for the PR, but I close this in favor of #312. In that PR we did a we things differently, like minimizing the changes to the package-lock.json and just updated the packages that were necessary.