SOLIDAUTH: jose vulnerable to untrusted JWK header keys

[jesscmoore]

Describe the Bug

solid_auth needs to use jose >= 0.3.5+1 to patch vulnerability - See matching issue in solidpod anusii/solidpod#627

App Version: solid_auth 0.1.28

gl
flutter pub get
...
  jose 0.3.5 (affected by advisory: [^0], 0.3.5+2 available)
...

Closing Criteria

Checklist for closing the issue:

• No errors from make prep
• All tests pass make qtest
• Jose patched
• Updated solid_auth published to pubdev

[jesscmoore]

Completed in solid_auth.
Tested login and logoutwith solidpod demopod app

flutter pub upgrade --tighten jose
Resolving dependencies...
Downloading packages...
...
No dependencies changed.
...
Running `upgrade --tighten` only in `.`. Run `flutter pub upgrade --tighten --directory ./example` separately.
Changed 1 constraint in pubspec.yaml:
  jose: ^0.3.5 -> ^0.3.5+2